GHSA-p8pc-3f7w-jr5q

Suggest an improvement
Source
https://github.com/advisories/GHSA-p8pc-3f7w-jr5q
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-p8pc-3f7w-jr5q/GHSA-p8pc-3f7w-jr5q.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-p8pc-3f7w-jr5q
Aliases
  • CVE-2020-26304
Published
2024-10-26T21:30:46Z
Modified
2024-11-13T23:24:36Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • 6.6 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green CVSS Calculator
Summary
Foundation Regular Expression Denial of Service vulnerability
Details

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available.

Database specific
{
    "github_reviewed_at": "2024-10-28T14:44:05Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-1333"
    ],
    "github_reviewed": true,
    "nvd_published_at": "2024-10-26T21:15:13Z"
}
References

Affected packages

npm / foundation-sites

Package

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.3.3