Cross-spawn vulnerabilities
We track 1 vulnerability in Cross-spawn products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Cross-spawn vulnerabilities
- 7.5 High severity
cross-spawn: Inefficient Regular Expression Complexity
Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very lar