Vulnerabilities > CVE-2021-23364 - Unspecified vulnerability in Browserslist Project Browserslist

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

browserslist-project

NVD

Published: 2021-04-28

Updated: 2024-11-21

Summary

The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.

Vulnerable Configurations

Part	Description	Count
Application	Browserslist_Project Browserslist Project Browserslist 4.0.0 Browserslist Project Browserslist 4.0.1 Browserslist Project Browserslist 4.0.2 Browserslist Project Browserslist 4.1.0 Browserslist Project Browserslist 4.1.1 Browserslist Project Browserslist 4.1.2 Browserslist Project Browserslist 4.2.0 Browserslist Project Browserslist 4.2.1 Browserslist Project Browserslist 4.3.0 Browserslist Project Browserslist 4.3.1 Browserslist Project Browserslist 4.3.2 Browserslist Project Browserslist 4.3.3 Browserslist Project Browserslist 4.3.4 Browserslist Project Browserslist 4.3.5 Browserslist Project Browserslist 4.3.6 Browserslist Project Browserslist 4.3.7 Browserslist Project Browserslist 4.4.0 Browserslist Project Browserslist 4.4.1 Browserslist Project Browserslist 4.4.2 Browserslist Project Browserslist 4.5.0 Browserslist Project Browserslist 4.5.1 Browserslist Project Browserslist 4.5.2 Browserslist Project Browserslist 4.5.3 Browserslist Project Browserslist 4.5.4 Browserslist Project Browserslist 4.5.5 Browserslist Project Browserslist 4.5.6 Browserslist Project Browserslist 4.6.0 Browserslist Project Browserslist 4.6.1 Browserslist Project Browserslist 4.6.2 Browserslist Project Browserslist 4.6.3 Browserslist Project Browserslist 4.6.4 Browserslist Project Browserslist 4.6.5 Browserslist Project Browserslist 4.6.6 Browserslist Project Browserslist 4.7.0 Browserslist Project Browserslist 4.7.1 Browserslist Project Browserslist 4.7.2 Browserslist Project Browserslist 4.7.3 Browserslist Project Browserslist 4.8.0 Browserslist Project Browserslist 4.8.1 Browserslist Project Browserslist 4.8.2 Browserslist Project Browserslist 4.8.3 Browserslist Project Browserslist 4.8.4 Browserslist Project Browserslist 4.8.5 Browserslist Project Browserslist 4.8.6 Browserslist Project Browserslist 4.8.7 Browserslist Project Browserslist 4.9.0 Browserslist Project Browserslist 4.9.1 Browserslist Project Browserslist 4.10.0 Browserslist Project Browserslist 4.11.0 Browserslist Project Browserslist 4.11.1 Browserslist Project Browserslist 4.12.0 Browserslist Project Browserslist 4.12.1 Browserslist Project Browserslist 4.12.2 Browserslist Project Browserslist 4.13.0 Browserslist Project Browserslist 4.14.0 Browserslist Project Browserslist 4.14.1 Browserslist Project Browserslist 4.14.2 Browserslist Project Browserslist 4.14.3 Browserslist Project Browserslist 4.14.4 Browserslist Project Browserslist 4.14.5 Browserslist Project Browserslist 4.14.6 Browserslist Project Browserslist 4.14.7 Browserslist Project Browserslist 4.15.0 Browserslist Project Browserslist 4.16.0 Browserslist Project Browserslist 4.16.1 Browserslist Project Browserslist 4.16.2 Browserslist Project Browserslist 4.16.3 Browserslist Project Browserslist 4.16.4	68

Summary

Vulnerable Configurations

References