Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Timespan Project Subscribe
Filtered by product Timespan
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16115 1 Timespan Project 1 Timespan 2020-02-20 5.0 MEDIUM 7.5 HIGH
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.