CVE-2023-30858

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

No affected versions have been published.

Timeline

Published: Apr 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-308599.8Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you t CVE-2023-30869.0Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-308605.4WWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can CVE-2023-308617.5Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for CVE-2023-308637.8In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional e CVE-2023-308647.8In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional e CVE-2023-308655.5In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privile CVE-2023-308665.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-308674.9In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as CVE-2023-308686.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 versions.CVE-2023-308699.8Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital CVE-2023-30876.1The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.