Lucene search

GoogleOSV:CVE-2018-7651

HistoryMar 04, 2018 - 1:29 a.m.

CVE-2018-7651

2018-03-0401:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.

CPENameOperatorVersion
ssrieq4.1.2
ssrieq4.1.1
ssrieq4.1.0
ssrieq4.1.6
ssrieq5.2.1
ssrieq1.0.0
ssrieq5.0.0
ssrieq3.0.0
ssrieq5.1.0
ssrieq4.1.5

Name	Operator	Version
ssri	eq	4.1.2
ssri	eq	4.1.1
ssri	eq	4.1.0
ssri	eq	4.1.6
ssri	eq	5.2.1
ssri	eq	1.0.0
ssri	eq	5.0.0
ssri	eq	3.0.0
ssri	eq	5.1.0
ssri	eq	4.1.5

Rows per page:

1-10 of 171

References

github.com/zkat/ssri/commit/d0ebcdc22cb5c8f47f89716d08b3518b2485d65d

github.com/zkat/ssri/issues/10

nodesecurity.io/advisories/565