zxcvbn vulnerabilities

1 known vulnerability in zxcvbn from Zxcvbn-ts. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  zxcvbn: Uncontrolled Resource Consumption

  CVE-2023-34109Jun 7, 2023Zxcvbn-ts

  zxcvbn-ts is an open source password strength estimator written in typescript. This vulnerability affects users running on the nodeJS platform which are using the second argument of the zxcvbn function. It can result in an unbounded resource consumption as the