Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21538 advisory.

  - Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service     (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program     by crafting a very large and well crafted string. (CVE-2024-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2024-21538

high

Tenable Plugins

high