A vulnerability was found in lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. Reference: https://github.com/lodash/lodash/issues/3359 https://snyk.io/vuln/SNYK-JS-LODASH-73639
Created lodash tracking bugs for this issue: Affects: fedora-all [bug 1743097]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
This issue has been addressed in the following products: Red Hat Quay 3 Via RHSA-2021:3917 https://access.redhat.com/errata/RHSA-2021:3917