View all vulnerabilities

CVE-2021-3777

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

Description

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
7.5
Score Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Versions
tmpl < 1.0.5
Severity
High
High
High
Ecosystem
JavaScript
Publish Date
September 20, 2021
Modified Date
November 7, 2023