CVE-2021-29059: Allocation of Resources Without Limits or Throttling

June 21, 2021 (updated November 4, 2021)

A vulnerability was discovered in IS-SVG where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.

References

nvd.nist.gov/vuln/detail/CVE-2021-29059

Code Behaviors & Features

Detect and mitigate CVE-2021-29059 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →