vercel ms vulnerabilities

Latest vercel ms CVEs

Newest publication first

1. CVE-2017-20162 vercel ms index.js parse redos

   Published 2023-01-05

   Medium·CVSS 5.3 EPSS 1.1%

   A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely....

2. CVE-2015-8315 Regular Expression Denial of Service in ms

   Published 2017-01-23

   High·CVSS 7.5 EPSS 7.0%

   The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.