CVE-2020-26256: Uncontrolled Resource Consumption

December 8, 2020 (updated October 7, 2021)

Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node. This vulnerability was found using a CodeQL query which identified EMPTY_ROW_REGEXP regular expression as vulnerable.

References

nvd.nist.gov/vuln/detail/CVE-2020-26256

Code Behaviors & Features

Detect and mitigate CVE-2020-26256 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →