Log in Start free

Vulnerability · Published Sep 29, 2021 · Assigned by snyk

CVE-2021-23446Regular Expression Denial of Service (ReDoS)

High 7.5

In plain English

A high-severity security flaw in handsontable. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.0% (higher than 87% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.0%top 12.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
npmhandsontable10.0.0GHSA-hf66-r44g-p7j9

Affected products (as reported)

VendorProductVersions
n/a handsontable unspecified – before 10.0.0
n/a Handsontable 0 – before unspecifiedunspecified – before 10.0.0

References