@devsoutinho/alfred-currency-converter (>=2.0.0 <=2.1.1), @felixcatto/ui (>=0.0.14 <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (=1.2.2)

string-math NPM version =1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

creationtimestamp| type| source ---|---|--- 2025-06-30 11:37:37+00:00| seen| https://gist.github.com/6en6ar/361608bccedb808061359481fe2f1b39 2025-06-30 17:07:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19942...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...

CVE-2025-45143

CVE-2025-45143 affects the JavaScript library string-math v1.2.2. Multiple sources consistently describe a Regex Denial of Service (ReDoS) caused by inefficient regular expression handling, exploitable via crafted input. The CVSSBase score is 7.0 (HIGH), with network attack vector, high attack co...

CVE-2025-45143

string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...