4 matches found
CVE-2025-69873
CVE-2025-69873 is an ReDoS in ajv when using the $data option. The vulnerability arises because the pattern keyword can take runtime data (JSON Pointer) and pass it to RegExp() without validation, enabling catastrophic backtracking. A sample payload with 31 characters can cause about 44 seconds o...
7.5CVSS6.1AI score0.00492EPSS
SaveExploits1References37
20