EUVD-2025-8133

Malicious code in bioql PyPI...

Denial Of Service (DoS)

@mozilla/readability is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression processing caused by specially crafted titles, allowing an attacker to cause a local denial of service...

@0xdwong/html-to-markdown (>=1.0.0, <=1.0.1), @1mbrain/api (>=0.1.1, <=0.1.4) +399 more potentially affected by CVE-2025-2792 via @mozilla/readability (>=0.3.0, <=0.5.0)

@mozilla/readability NPM version =0.3.0, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.6.0, =1.7.6 - @alexion42/pi-web-search 0.1.0 - @ammit/llms-txt 0.1.0 and more Source cves: CVE-2025-2792 Source advisory: OSV:GHSA-3P6V-HRG8-8QJ7...

GHSA-3P6V-HRG8-8QJ7 @mozilla/readability Denial of Service through Regex

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...