All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade npmUpgrade nodejs-devel | May 4, 2022 | May 4, 2021 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejsUpgrade nodejs-full-i18n | Sep 22, 2021 | May 4, 2021 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-full-i18n | Sep 23, 2021 | May 4, 2021 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-full-i18nNo solution existsUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-devel | Sep 22, 2021 | May 4, 2021 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debuginfo | May 5, 2022 | May 4, 2021 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | May 4, 2021 |
| Suse | — | Upgrade npm10Upgrade npm8Upgrade nodejs8Upgrade nodejs10-develUpgrade nodejs8-develUpgrade nodejs14-docsUpgrade nodejs12-develUpgrade nodejs8-docsUpgrade nodejs14Upgrade nodejs10-docsUpgrade nodejs10Upgrade npm14Upgrade npm12Upgrade nodejs12-docsUpgrade nodejs-commonUpgrade nodejs14-develUpgrade nodejs12 | Feb 22, 2022 | May 4, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub