CVE-2021-39157

Katalog CVE

CVSS 7.5 · High EPSS 2,1%

Kerentanan Improper Handling of Exceptional Conditions pada detect-character-encoding project detect-character-encoding. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in [detect-character-encoding v0.7.0](https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.7.0). No workaround are available and all users should update to resolve this issue.

Rincian

Terbit di NVD

24 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-755: Improper Handling of Exceptional Conditions

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sonicdoe/detect-character-encoding/commit/992a11007fff6cfd40b952150ab8d30410c4a20a patch · advisory pihak ketiga
• https://github.com/sonicdoe/detect-character-encoding/issues/15 exploit · advisory pihak ketiga
• https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-jqfh-8hw5-fqjr exploit · advisory pihak ketiga