CVE-2021-4299

Name of the Vulnerable Software and Affected Versions cronvel string-kit versions up to 0.12.7

Description A problematic issue was found in the naturalSort function of the lib/naturalSort.js file, leading to inefficient regular expression complexity. The attack can be initiated remotely.

Recommendations For cronvel string-kit versions up to 0.12.7, upgrade to version 0.12.8 to address this issue. As a temporary workaround, consider restricting the use of the naturalSort function until the patch is applied.