VDB
KO
HIGH 7.5

GHSA-hpmr-g4pq-jhgp

Denial of service in chrono-node

Details

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm / chrono-node
Introduced in: 0 Fixed in: 2.2.4
Fix npm install chrono-node@2.2.4

References