Vulnerability Details CVE-2017-16115
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2017-16115
-
cpe:2.3:a:timespan_project:timespan:2.0.0
-
cpe:2.3:a:timespan_project:timespan:2.0.1
-
cpe:2.3:a:timespan_project:timespan:2.1.0
-
cpe:2.3:a:timespan_project:timespan:2.2.0
-
cpe:2.3:a:timespan_project:timespan:2.3.0