CVE-2021-23343

Name of the Vulnerable Software and Affected Versions path-parse versions all

Description The issue is related to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.

Recommendations For all versions, consider disabling the use of splitDeviceRe, splitTailRe, and splitPathRe regular expressions as a temporary workaround until a patch is available. Restrict the use of these regular expressions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.