vulnerability

FreeBSD: VID-c174118e-1b11-11ec-9d9d-0022489ad614 (CVE-2021-27290): Node.js -- July 2021 Security Releases

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Sep 21, 2021

Added

Nov 4, 2022

Modified

Jun 15, 2026

Description

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

Solutions

freebsd-upgrade-package-node14freebsd-upgrade-package-node

References

CVE-2021-27290
https://attackerkb.com/topics/CVE-2021-27290
EUVD-EUVD-2021-0713
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0713

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report