CVE-2020-26306

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-26306

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26306.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-26306

Aliases

GHSA-68qg-g787-3rp5

Published

2024-10-26T21:15:13Z

Modified

2026-11-10T02:30:24Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green CVSS Calculator

Summary

[none]

Details

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.

References

Affected packages

Git / github.com/benhmoore/knwl

Affected ranges

Type

GIT

Repo

https://github.com/benhmoore/knwl

Events

Introduced

Last Affected

cbefd0ed35af9a7fa9e606f75aebc1b67b4afcc5

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "1.0.2"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Affected versions

0.*

0.1

v0.*

v0.1

v1.*

v1.0

v1.0.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26306.json"