Vulnerabilities > CVE-2023-26103 - Unspecified vulnerability in Deno

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

deno

NVD

Published: 2023-02-25

Updated: 2023-11-07

Summary

Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form of /s*,s*/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to significantly slow down a web socket server.

Vulnerable Configurations

Part	Description	Count
Application	Deno Deno Deno 0.0.1 Deno Deno 0.0.2 Deno Deno 0.0.3 Deno Deno 0.1.0 Deno Deno 0.1.1 Deno Deno 0.1.2 Deno Deno 0.1.3 Deno Deno 0.1.4 Deno Deno 0.1.5 Deno Deno 0.1.6 Deno Deno 0.1.7 Deno Deno 0.1.8 Deno Deno 0.1.9 Deno Deno 0.1.10 Deno Deno 0.1.11 Deno Deno 0.1.12 Deno Deno 0.2.0 Deno Deno 0.2.1 Deno Deno 0.2.2 Deno Deno 0.2.3 Deno Deno 0.2.4 Deno Deno 0.2.5 Deno Deno 0.2.6 Deno Deno 0.2.7 Deno Deno 0.2.8 Deno Deno 0.2.9 Deno Deno 0.2.10 Deno Deno 0.2.11 Deno Deno 0.3.0 Deno Deno 0.3.1 Deno Deno 0.3.2 Deno Deno 0.3.3 Deno Deno 0.3.4 Deno Deno 0.3.5 Deno Deno 0.3.6 Deno Deno 0.3.7 Deno Deno 0.3.8 Deno Deno 0.3.9 Deno Deno 0.3.10 Deno Deno 0.3.11 Deno Deno 0.4.0 Deno Deno 0.5.0 Deno Deno 0.6.0 Deno Deno 0.7.0 Deno Deno 0.8.0 Deno Deno 0.9.0 Deno Deno 0.10.0 Deno Deno 0.11.0 Deno Deno 0.12.0 Deno Deno 0.13.0 Deno Deno 0.14.0 Deno Deno 0.15.0 Deno Deno 0.16.0 Deno Deno 0.17.0 Deno Deno 0.18.0 Deno Deno 0.19.0 Deno Deno 0.20.0 Deno Deno 0.21.0 Deno Deno 0.22.0 Deno Deno 0.23.0 Deno Deno 0.24.0 Deno Deno 0.25.0 Deno Deno 0.26.0 Deno Deno 0.27.0 Deno Deno 0.28.0 Deno Deno 0.28.1 Deno Deno 0.29.0 Deno Deno 0.30.0 Deno Deno 0.30.1 Deno Deno 0.31.0 Deno Deno 0.32.0 Deno Deno 0.33.0 Deno Deno 0.34.0 Deno Deno 0.35.0 Deno Deno 0.36.0 Deno Deno 0.37.0 Deno Deno 0.37.1 Deno Deno 0.38.0 Deno Deno 0.39.0 Deno Deno 0.40.0 Deno Deno 0.41.0 Deno Deno 0.42.0 Deno Deno 0.50.0 Deno Deno 0.51.0 Deno Deno 0.52.0 Deno Deno 0.53.0 Deno Deno 0.54.0 Deno Deno 0.55.0 Deno Deno 0.56.0 Deno Deno 0.57.0 Deno Deno 0.58.0 Deno Deno 0.59.0 Deno Deno 0.60.0 Deno Deno 0.61.0 Deno Deno 0.62.0 Deno Deno 0.63.0 Deno Deno 0.64.0 Deno Deno 0.65.0 Deno Deno 0.66.0 Deno Deno 0.67.0 Deno Deno 0.68.0 Deno Deno 0.69.0 Deno Deno 0.70.0 Deno Deno 0.71.0 Deno Deno 0.72.0 Deno Deno 0.73.0 Deno Deno 0.74.0 Deno Deno 0.75.0 Deno Deno 0.76.0 Deno Deno 0.77.0 Deno Deno 0.78.0 Deno Deno 0.79.0 Deno Deno 0.80.0 Deno Deno 0.81.0 Deno Deno 0.82.0 Deno Deno 0.83.0 Deno Deno 0.84.0 Deno Deno 0.85.0 Deno Deno 0.86.0 Deno Deno 0.87.0 Deno Deno 0.88.0 Deno Deno 0.89.0 Deno Deno 0.90.0 Deno Deno 0.91.0 Deno Deno 0.92.0 Deno Deno 0.93.0 Deno Deno 0.94.0 Deno Deno 0.95.0 Deno Deno 0.96.0 Deno Deno 0.97.0 Deno Deno 0.98.0 Deno Deno 0.99.0 Deno Deno 0.100.0 Deno Deno 0.101.0 Deno Deno 0.102.0 Deno Deno 0.103.0 Deno Deno 0.104.0 Deno Deno 0.105.0 Deno Deno 0.106.0 Deno Deno 0.107.0 Deno Deno 0.108.0 Deno Deno 0.109.0 Deno Deno 0.110.0 Deno Deno 0.111.0 Deno Deno 1.0.0 Deno Deno 1.0.1 Deno Deno 1.0.2 Deno Deno 1.0.3 Deno Deno 1.5.0 Deno Deno 1.5.1 Deno Deno 1.5.2 Deno Deno 1.5.3 Deno Deno 1.5.4 Deno Deno 1.6.0 Deno Deno 1.6.1 Deno Deno 1.6.2 Deno Deno 1.6.3 Deno Deno 1.7.0 Deno Deno 1.7.1 Deno Deno 1.7.2 Deno Deno 1.7.3 Deno Deno 1.7.4 Deno Deno 1.7.5 Deno Deno 1.8.0 Deno Deno 1.8.1 Deno Deno 1.8.2 Deno Deno 1.8.3 Deno Deno 1.9.0 Deno Deno 1.9.1 Deno Deno 1.9.2 Deno Deno 1.10.0 Deno Deno 1.10.1 Deno Deno 1.10.2 Deno Deno 1.10.3 Deno Deno 1.11.0 Deno Deno 1.11.1 Deno Deno 1.11.2 Deno Deno 1.11.3 Deno Deno 1.11.4 Deno Deno 1.11.5 Deno Deno 1.12.0 Deno Deno 1.12.1 Deno Deno 1.12.2 Deno Deno 1.13.0 Deno Deno 1.13.1 Deno Deno 1.13.2 Deno Deno 1.14.0 Deno Deno 1.14.1 Deno Deno 1.14.2 Deno Deno 1.14.3 Deno Deno 1.15.0 Deno Deno 1.15.1 Deno Deno 1.15.2 Deno Deno 1.15.3 Deno Deno 1.16.0 Deno Deno 1.16.1 Deno Deno 1.16.2 Deno Deno 1.16.3 Deno Deno 1.16.4 Deno Deno 1.17.0 Deno Deno 1.17.1 Deno Deno 1.17.2 Deno Deno 1.17.3 Deno Deno 1.18.0 Deno Deno 1.18.1 Deno Deno 1.18.2 Deno Deno 1.19.0 Deno Deno 1.19.1 Deno Deno 1.19.2 Deno Deno 1.19.3 Deno Deno 1.20.0 Deno Deno 1.20.1 Deno Deno 1.20.2 Deno Deno 1.20.3 Deno Deno 1.20.4 Deno Deno 1.20.5 Deno Deno 1.20.6 Deno Deno 1.21.0 Deno Deno 1.21.1 Deno Deno 1.21.2 Deno Deno 1.21.3 Deno Deno 1.22.0 Deno Deno 1.22.1 Deno Deno 1.22.2 Deno Deno 1.22.3 Deno Deno 1.23.0 Deno Deno 1.23.1 Deno Deno 1.23.2 Deno Deno 1.23.3 Deno Deno 1.23.4 Deno Deno 1.24.0 Deno Deno 1.24.1 Deno Deno 1.24.2 Deno Deno 1.24.3 Deno Deno 1.25.0 Deno Deno 1.25.1 Deno Deno 1.25.2 Deno Deno 1.25.3 Deno Deno 1.25.4 Deno Deno 1.26.0 Deno Deno 1.26.1 Deno Deno 1.26.2 Deno Deno 1.27.0 Deno Deno 1.27.1 Deno Deno 1.27.2 Deno Deno 1.28.0 Deno Deno 1.28.1 Deno Deno 1.28.2 Deno Deno 1.28.3 Deno Deno 1.29.0 Deno Deno 1.29.1 Deno Deno 1.29.2 Deno Deno 1.29.3 Deno Deno 1.29.4 Deno Deno 1.30.0 Deno Deno 1.30.1 Deno Deno 1.30.2 Deno Deno 1.30.3	261

Summary

Vulnerable Configurations

References