WS-2021-0638 | Mend Vulnerability Database

Vulnerability DatabaseWS-2021-0638

WS-2021-0638

Published:May 20, 2026

Updated:May 20, 2026

There is regular Expression Denial of Service (ReDoS) vulnerability in mocha. It allows cause a denial of service when stripping crafted invalid function definition from strs.

Affected Packages

mocha (CDN_JS):

Affected version(s) >=2.3.3 <3.0.0-0

Fix Suggestion:

Update to version 3.0.0-0

mocha (CDN_JS):

Affected version(s) >=3.0.0-1 <6.0.0-0

Fix Suggestion:

Update to version 6.0.0-0

mocha (CDN_JS):

Affected version(s) >=6.0.0-1 <10.1.0

Fix Suggestion:

Update to version 10.1.0

doccano (CONDA):

Affected version(s) >=1.0.4 <1.4.1

Fix Suggestion:

Update to version 1.4.1

jsdom (CONDA):

Affected version(s) =11.0.0 <11.11.0

Fix Suggestion:

Update to version 11.11.0

tensorflow (CONDA):

Affected version(s) =0.7.1 <0.8.0

Fix Suggestion:

Update to version 0.8.0

svg2png (CONDA):

Affected version(s) =4.1.1

Fix Suggestion:

Update to version no_fix

mocha (NPM):

Affected version(s) >=3.0.0-1 <6.0.0-0

Fix Suggestion:

Update to version 6.0.0-0

mocha (NPM):

Affected version(s) >=6.0.0-1 <10.1.0

Fix Suggestion:

Update to version 10.1.0

mocha (NPM):

Affected version(s) >=2.3.3 <3.0.0-0

Fix Suggestion:

Update to version 3.0.0-0

raml.parser (NUGET):

Affected version(s) >=1.0.5 <1.0.7

Fix Suggestion:

Update to version 1.0.7

znxtapp.core.module.theme (NUGET):

Affected version(s) >=1.0.4-alpha <1.0.9-Beta

Fix Suggestion:

Update to version 1.0.9-Beta

chutzpah (NUGET):

Affected version(s) >=4.2.1 <4.2.4

Fix Suggestion:

Update to version 4.2.4

fable.library.template (NUGET):

Affected version(s) >=0.1.0-alpha002 <=0.1.0-alpha003

Fix Suggestion:

Update to version no_fix

metaauth (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

octoweb (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

bundler (NUGET):

Affected version(s) >=1.1.25 <1.1.31

Fix Suggestion:

Update to version 1.1.31

octoweb01 (NUGET):

Affected version(s) =1.1.0

Fix Suggestion:

Update to version no_fix

inferno.bunyan (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

newplatform.flexberry.designer.embercache (NUGET):

Affected version(s) =3.7.0-beta09

Fix Suggestion:

Update to version no_fix

yiixwom/yii-xwom (PHP):

Affected version(s) =dev-master <v0.1.2

Fix Suggestion:

Update to version v0.1.2

osfed/l4crud (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

native-network/example-open-social-composer (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/web/modules/contrib/flag/ini-1.3.7 <=dev-dependabot/npm_and_yarn/web/libraries/diff/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) >=3.6.1-b1 <3.8.0-rc1

Fix Suggestion:

Update to version 3.8.0-rc1

yivic/yivic-elce (PHP):

Affected version(s) >=dev-fixbug/TVNnWKJz-wp-elce-admin-options-header-error-styles-ui-again <=dev-origin/v1.0.1

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =3.0.2 <3.0.2-b1

Fix Suggestion:

Update to version 3.0.2-b1

adamstyperek/base.symfony.crud (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

douggonsouza/discovery (PHP):

Affected version(s) >=v1.0.3 <=v1.0.15

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =3.11.0-b1 <3.11.0-b2

Fix Suggestion:

Update to version 3.11.0-b2

thangbeo/menu (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

cupboard/core (PHP):

Affected version(s) >=dev-master <=1.2.0

Fix Suggestion:

Update to version no_fix

thangbeo/languages (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

baijunyao/laravel-bjyadmin (PHP):

Affected version(s) =v3.0.3 <5.1.x-dev

Fix Suggestion:

Update to version 5.1.x-dev

matomo/matomo (PHP):

Affected version(s) =3.12.0-b1 <3.12.0-b2

Fix Suggestion:

Update to version 3.12.0-b2

cognitus/richfilemanager (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

servocoder/richfilemanager (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/libs/jquery.contextmenu/lodash-4.17.19 <=v2.7.6

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =3.12.0-b1 <3.12.0-b2

Fix Suggestion:

Update to version 3.12.0-b2

foundation/foundation-sites (PHP):

Affected version(s) >=dev-feature/add-deeplink-test-to-responsive-accordion-tabs <dev-feature/update-customizer

Fix Suggestion:

Update to version dev-feature/update-customizer

zurb/foundation (PHP):

Affected version(s) =6.1.1 <v6.1.1

Fix Suggestion:

Update to version v6.1.1

mfcc/skeleton-application (PHP):

Affected version(s) =dev-imgbot <zf/release-2.0.0beta1

Fix Suggestion:

Update to version zf/release-2.0.0beta1

oburatongoi/productivity (PHP):

Affected version(s) >=0.4.0 <=0.4.45

Fix Suggestion:

Update to version no_fix

maslosoft/binder (PHP):

Affected version(s) >=1.0.30 <2.0.7

Fix Suggestion:

Update to version 2.0.7

douggonsouza/amazonita (PHP):

Affected version(s) >=dev-main <=1.0.2

Fix Suggestion:

Update to version no_fix

diamondphp/diamondphp (PHP):

Affected version(s) >=dev-patch-1 <=dev-patch-2

Fix Suggestion:

Update to version no_fix

asminog/nemo-travel-frontend (PHP):

Affected version(s) >=dev-master <v0.0.22

Fix Suggestion:

Update to version v0.0.22

codtail/admin-suit (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

ariiportal/symfony-arii-edition (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/web/raphael/decode-uri-component-0.2.2 <=dev-dependabot/npm_and_yarn/web/raphael/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =14267.x-dev <dev-fix14370

Fix Suggestion:

Update to version dev-fix14370

baijunyao/laravel-bjyadmin (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

zurb/foundation (PHP):

Affected version(s) =dev-feature/jquery-3-support <v3.0.0

Fix Suggestion:

Update to version v3.0.0

matomo/matomo (PHP):

Affected version(s) >=3.0.1 <3.10.0.x-dev

Fix Suggestion:

Update to version 3.10.0.x-dev

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v5.3.0.4 <v5.5.6.1

Fix Suggestion:

Update to version v5.5.6.1

douggonsouza/imwvg (PHP):

Affected version(s) >=dev-main <=1.0.1

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =v6.4.0-rc1 <v6.4.0-rc2

Fix Suggestion:

Update to version v6.4.0-rc2

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v1.0.0 <dev-dependabot/npm_and_yarn/minimist-1.2.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6

piwik/piwik (PHP):

Affected version(s) =3.0.1-b3 <3.0.2-rc1

Fix Suggestion:

Update to version 3.0.2-rc1

piwik/piwik (PHP):

Affected version(s) =14208.x-dev <dev-dev-14211

Fix Suggestion:

Update to version dev-dev-14211

dekuan/vdata (PHP):

Affected version(s) >=dev-dev <1.0

Fix Suggestion:

Update to version 1.0

piwik/piwik (PHP):

Affected version(s) >=3.1.2-b1 <3.2.0

Fix Suggestion:

Update to version 3.2.0

enhavo/assets-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =13880.x-dev <dev-dev-13900

Fix Suggestion:

Update to version dev-dev-13900

piwik/piwik (PHP):

Affected version(s) =3.2.0-b3 <3.2.0-b4

Fix Suggestion:

Update to version 3.2.0-b4

zurb/foundation (PHP):

Affected version(s) =dev-feature/xy-grid-width-height-fix <dev-master

Fix Suggestion:

Update to version dev-master

foundation/foundation-sites (PHP):

Affected version(s) =dev-feature/revert-9985-menu-vertical-align-center

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

valeriy-brunov/webcomponent (PHP):

Affected version(s) >=dev-main <1.0.1

Fix Suggestion:

Update to version 1.0.1

triawarman/yii2-richfilemanager (PHP):

Affected version(s) >=dev-bckp-develop <v0.1

Fix Suggestion:

Update to version v0.1

piwik/piwik (PHP):

Affected version(s) =13880.x-dev <dev-dev-13900

Fix Suggestion:

Update to version dev-dev-13900

livecms/core (PHP):

Affected version(s) =dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

piwik/piwik (PHP):

Affected version(s) >=3.5.0-b2 <3.6.1

Fix Suggestion:

Update to version 3.6.1

piwik/piwik (PHP):

Affected version(s) =3.9.0-b1 <3.9.0-b2

Fix Suggestion:

Update to version 3.9.0-b2

matomo/matomo (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

foundation/foundation-sites (PHP):

Affected version(s) >=v6.2.4-rc2 <v6.3.0

Fix Suggestion:

Update to version v6.3.0

asminog/nemo-travel-frontend (PHP):

Affected version(s) >=v0.0.23 <=v0.0.29

Fix Suggestion:

Update to version no_fix

gtdxyz/suda (PHP):

Affected version(s) =dev-main <5.0

Fix Suggestion:

Update to version 5.0

matomo/matomo (PHP):

Affected version(s) =14208.x-dev <dev-dev-14211

Fix Suggestion:

Update to version dev-dev-14211

zurb/foundation (PHP):

Affected version(s) =v6.2.4 <v6.3-rc1

Fix Suggestion:

Update to version v6.3-rc1

datht/language (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =v6.4.0-rc4 <v6.4.0-rc5

Fix Suggestion:

Update to version v6.4.0-rc5

douggonsouza/gentelela (PHP):

Affected version(s) =dev-main <1.0.0

Fix Suggestion:

Update to version 1.0.0

blueimp/jquery-file-upload (PHP):

Affected version(s) >=v10.0.0 <v10.32.0

Fix Suggestion:

Update to version v10.32.0

douggonsouza/gentelela (PHP):

Affected version(s) >=1.0.1 <=1.0.13

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =dev-profiles <dev-providerremoval

Fix Suggestion:

Update to version dev-providerremoval

piwik/piwik (PHP):

Affected version(s) >=3.0.3 <3.0.5-b1

Fix Suggestion:

Update to version 3.0.5-b1

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v1.4.0 <dev-dependabot/composer/composer/composer-1.10.22

Fix Suggestion:

Update to version dev-dependabot/composer/composer/composer-1.10.22

claudiusnascimento/gentelelladashboard (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

limefamily/yii2-limetheme (PHP):

Affected version(s) >=1.0.0 <1.0.12

Fix Suggestion:

Update to version 1.0.12

lamarques/framework (PHP):

Affected version(s) >=dev-integracao_permissoes <dev-issue#1

Fix Suggestion:

Update to version dev-issue#1

piwik/piwik (PHP):

Affected version(s) =3.8.1-b1 <3.9.0-rc1

Fix Suggestion:

Update to version 3.9.0-rc1

foundation/foundation-sites (PHP):

Affected version(s) =dev-feature/xy-grid-width-height-fix <dev-master

Fix Suggestion:

Update to version dev-master

eftec/gentelella-bladeone (PHP):

Affected version(s) >=dev-master <=1.0

Fix Suggestion:

Update to version no_fix

ramphor/filter-form (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

douggonsouza/discovery (PHP):

Affected version(s) =dev-main <v1.0.0

Fix Suggestion:

Update to version v1.0.0

piwik/piwik (PHP):

Affected version(s) =dev-profiles <dev-providerremoval

Fix Suggestion:

Update to version dev-providerremoval

hkvstore/richfilemanager (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/libs/jquery.contextmenu/lodash-4.17.15 <v2.8.1

Fix Suggestion:

Update to version v2.8.1

pframe/phalcon-clear (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =6.2.0-rc.1 <v6.2.0-rc.1

Fix Suggestion:

Update to version v6.2.0-rc.1

zurb/foundation (PHP):

Affected version(s) =6.0.6 <v6.0.6

Fix Suggestion:

Update to version v6.0.6

rndwiga/ui-gentella (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =6.0.0 <v6.0.0

Fix Suggestion:

Update to version v6.0.0

piwik/piwik (PHP):

Affected version(s) =dev-globalscache <dev-gmdateint

Fix Suggestion:

Update to version dev-gmdateint

zurb/foundation (PHP):

Affected version(s) =6.1.0 <v6.1.0

Fix Suggestion:

Update to version v6.1.0

yiixwom/yii-xwom (PHP):

Affected version(s) >=v1.0.3 <1.0.6

Fix Suggestion:

Update to version 1.0.6

piwik/piwik (PHP):

Affected version(s) =14267.x-dev <dev-fix14370

Fix Suggestion:

Update to version dev-fix14370

baijunyao/laravel-bjyadmin (PHP):

Affected version(s) =5.4.x-dev

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =6.1.2 <v6.1.2

Fix Suggestion:

Update to version v6.1.2

ikodota/laravel-discover (PHP):

Affected version(s) =dev-master <v1.0.1

Fix Suggestion:

Update to version v1.0.1

piwik/piwik (PHP):

Affected version(s) =3.9.0-rc2 <3.9.0

Fix Suggestion:

Update to version 3.9.0

lamarques/framework (PHP):

Affected version(s) >=v0.5 <=v1.0

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) >=v6.4.2 <v6.4.4-rc1

Fix Suggestion:

Update to version v6.4.4-rc1

maslosoft/binder (PHP):

Affected version(s) >=dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v5.5.6.2 <v5.5.9.1

Fix Suggestion:

Update to version v5.5.9.1

lamarques/framework (PHP):

Affected version(s) >=dev-master <v0.1-dev

Fix Suggestion:

Update to version v0.1-dev

clem44/slim-starterkit (PHP):

Affected version(s) >=dev-main <=v1.0.3

Fix Suggestion:

Update to version no_fix

oburatongoi/productivity (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

piwik/piwik (PHP):

Affected version(s) >=3.3.0-rc2 <3.3.0-b1

Fix Suggestion:

Update to version 3.3.0-b1

ariiportal/symfony-arii-edition (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/web/cytoscape.js-unstable/highlight.js-10.4.1 <dev-master

Fix Suggestion:

Update to version dev-master

piwik/piwik (PHP):

Affected version(s) >=3.3.1-b1 <3.5.0-b1

Fix Suggestion:

Update to version 3.5.0-b1

ikodota/laravel-discover (PHP):

Affected version(s) =v1.0.2

Fix Suggestion:

Update to version no_fix

mazguhin/smans (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

piwik/piwik (PHP):

Affected version(s) >=3.0.2-b2 <3.0.3-rc1

Fix Suggestion:

Update to version 3.0.3-rc1

zurb/foundation (PHP):

Affected version(s) =6.0.5 <v6.0.5

Fix Suggestion:

Update to version v6.0.5

restaurare/ewlist (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

maslosoft/balin (PHP):

Affected version(s) >=1.0.30 <2.0.7

Fix Suggestion:

Update to version 2.0.7

zurb/foundation (PHP):

Affected version(s) =6.0.4 <v6.0.4

Fix Suggestion:

Update to version v6.0.4

krzysiekpiasecki/gentelella (PHP):

Affected version(s) =dev-s4.0

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =dev-feature/revert-9985-menu-vertical-align-center <dev-fix/12142-label-middle-align-with-input

Fix Suggestion:

Update to version dev-fix/12142-label-middle-align-with-input

fidpro/builder (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

valeriy-brunov/webcomponent (PHP):

Affected version(s) >=1.1.0 <=1.2.2

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =3.0.1-b1 <3.0.1-b2

Fix Suggestion:

Update to version 3.0.1-b2

foundation/foundation-sites (PHP):

Affected version(s) =dev-feature/jquery-3-support <dev-dependabot/npm_and_yarn/nanoid-3.2.0

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/nanoid-3.2.0

matomo/matomo (PHP):

Affected version(s) >=2.1.1-b10 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

zurb/foundation (PHP):

Affected version(s) =6.2.1 <v6.2.1

Fix Suggestion:

Update to version v6.2.1

foundation/foundation-sites (PHP):

Affected version(s) >=v6.3.1 <v6.5.0-rc.1

Fix Suggestion:

Update to version v6.5.0-rc.1

matomo/matomo (PHP):

Affected version(s) =dev-globalscache <dev-gmdateint

Fix Suggestion:

Update to version dev-gmdateint

jjsoft-ar/siges-ui (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

maslosoft/balin (PHP):

Affected version(s) >=dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

jjsoft-ar/siges-ui (PHP):

Affected version(s) =1.1.4

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) >=3.0.5-b2 <3.1.1-b3

Fix Suggestion:

Update to version 3.1.1-b3

baijunyao/laravel-bjyblog (PHP):

Affected version(s) =v1.3.0 <dev-dependabot/npm_and_yarn/dns-packet-1.3.4

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/dns-packet-1.3.4

zurb/foundation (PHP):

Affected version(s) =6.0.3 <v6.0.3

Fix Suggestion:

Update to version v6.0.3

jasonbrady/joyride (PHP):

Affected version(s) =dev-master <1.0.2

Fix Suggestion:

Update to version 1.0.2

vinsofts/translates (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) >=2.1.1-b10 <3.0.0-b5

Fix Suggestion:

Update to version 3.0.0-b5

ioext/vdata (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

maslosoft/balin (PHP):

Affected version(s) =2.0.9

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =3.11.0-rc1 <3.11.0-rc2

Fix Suggestion:

Update to version 3.11.0-rc2

zurb/foundation (PHP):

Affected version(s) =6.0.2 <dev-dependabot/npm_and_yarn/ssri-6.0.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/ssri-6.0.2

piwik/piwik (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

gtdxyz/suda (PHP):

Affected version(s) >=5.1.1 <5.2.0

Fix Suggestion:

Update to version 5.2.0

piwik/piwik (PHP):

Affected version(s) >=3.9.0-b3 <3.10.0.x-dev

Fix Suggestion:

Update to version 3.10.0.x-dev

phamanhtu/translate (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dekuan/vdata (PHP):

Affected version(s) >=1.0.6 <=1.0.30

Fix Suggestion:

Update to version no_fix

foundation/foundation-sites (PHP):

Affected version(s) >=6.0.0 <v6.2.4-rc1

Fix Suggestion:

Update to version v6.2.4-rc1

ourgapps/gentelella (PHP):

Affected version(s) >=dev-master <=v1.4.0

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) >=dev-feature/add-deeplink-test-to-responsive-accordion-tabs <dev-feature/update-customizer

Fix Suggestion:

Update to version dev-feature/update-customizer

zurb/foundation (PHP):

Affected version(s) =6.0.1 <v6.0.1

Fix Suggestion:

Update to version v6.0.1

nicolaecasir/agenti (PHP):

Affected version(s) >=dev-master <=1.0.2

Fix Suggestion:

Update to version no_fix

hkvstore/richfilemanager (PHP):

Affected version(s) >=v3.0.0 <=v3.2.0

Fix Suggestion:

Update to version no_fix

zurb/foundation (PHP):

Affected version(s) =6.2.0 <v6.2.0

Fix Suggestion:

Update to version v6.2.0

atha/ci-rest-server (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/assets/sbadmin/engine.io-and-browser-sync-6.2.1 <=dev-dependabot/npm_and_yarn/assets/sbadmin/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

Related Resources (1)

https://github.com/mochajs/mocha/commit/61b4b9209c2c64b32c8d48b1761c3b9384d411ea

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

NONE

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH