Description (CNA)
formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| hapijs / formula | affected < 3.0.1 |
CWE
CWE-1333
References
- https://github.com/hapijs/formula/security/advisories/GHSA-c2jc-4fpr-4vhg
- https://github.com/hapijs/formula/commit/9fbc20a02d75ae809c37a610a57802cd1b41b3fe
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.