All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-devel | May 4, 2022 | May 4, 2021 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-docs | Sep 22, 2021 | May 4, 2021 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npm | Sep 23, 2021 | May 4, 2021 |
| Redhat_linux | — | Upgrade nodejs-debugsourceNo solution existsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-devel | Sep 22, 2021 | May 4, 2021 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debugsource | May 5, 2022 | May 4, 2021 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | May 4, 2021 |
| Suse | — | Upgrade nodejs8-docsUpgrade npm8Upgrade nodejs8Upgrade nodejs10-develUpgrade nodejs12-develUpgrade nodejs8-develUpgrade nodejs14-docsUpgrade npm10Upgrade nodejs14Upgrade nodejs10-docsUpgrade nodejs12Upgrade nodejs12-docsUpgrade nodejs-commonUpgrade npm14Upgrade nodejs10Upgrade npm12Upgrade nodejs14-devel | Feb 22, 2022 | May 4, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub