@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)

string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

creationtimestamp| type| source ---|---|--- 2025-06-30 11:37:37+00:00| seen| https://gist.github.com/6en6ar/361608bccedb808061359481fe2f1b39 2025-06-30 17:07:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19942...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

The string-math library (version 1.2.2 ) is vulnerable to a Regex Denial of Service (ReDoS) . This vulnerability is caused by inefficient regular expression processing, which allows an attacker to trigger a denial of service by providing a crafted input . Several packages, including @devsoutinho/...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...