AIKIDO-2026-10248
petname is vulnerable to Denial of Service (DoS)
45
Medium Risk
This Affects:
petnameTL;DR
Affected versions of this package are vulnerable to a denial of service (DoS) vulnerability caused by insufficient input validation in the pet name generation functions. When a user supplies a letters value smaller than the shortest available word, the affected functions may enter an infinite loop, resulting in excessive CPU consumption and application unavailability. This issue can be exploited through crafted input parameters passed via the library or CLI interface. The vulnerability is fixed by introducing minimum length validation and additional input checks to prevent infinite loop conditions and resource exhaustion.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
petname is vulnerable to Denial of Service (DoS) in versions 0.1 - 2.8.
How to fix this
Upgrade the petname library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant