CVE-2021-27290

CVE-2021-27290 affects the ssri npm module used by Node.js. Connected advisories confirm a Regular Expression Denial of Service (ReDoS) when parsing malicious SRIs in strict mode. The issue is fixed in ssri 8.0.1; remediation typically involves upgrading the affected Node.js package family (e.g.,...

Regular Expression Denial of Service

Overview ssri 5.2.2-6.0.1 and 7.0.0-7.1.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option. Recommendation...

421752593pro (5.6.0), @pnpm/default-fetcher (>=0.3.0, <=0.3.2) +8 more potentially affected by CVE-2018-7651 via ssri (>=5.0.0, <=5.2.1)

ssri NPM version =5.0.0, =0.3.0, =0.3.4, =1.19.6, =1.23.2, =1.4.9, =0.7.12, =0.7.13, =2.2.2 Source cves: CVE-2018-7651 Source advisory: OSV:GHSA-325J-24F4-QV5X...

Regular Expression Denial of Service in ssri

Version of ssri prior to 5.2.2 are vulnerable to regular expression denial of service ReDoS when using strict mode. Recommendation Update to version 5.2.2 or later...

Joyent Node.js ssri module denial of service vulnerability

Joyent Node.js is a set of Joyent's web application platform built on top of Google's V8 JavaScript engine. ssri module is one of the modules used for parsing, manipulating, serializing, and verifying the integrity of sub-resources . A security vulnerability exists in the index.js file in the...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

UBUNTU-CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

DEBIAN-CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

CVE-2018-7651

The CVE-2018-7651 entry concerns the Node.js ssri module. Affected component: index.js in ssri prior to 5.2.2. Root cause: a regular expression denial of service (ReDoS) in strict mode triggered by a long base64 hash string. Impact: potential DoS condition; no exploitation specifics provided in t...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

Regular Expression Denial Of Service (ReDoS)

ssri is vulnerable to regular expression denial of service ReDoS attacks. If an application is using the opts.strict option, attackers can inject extremely long base64 hash strings to cause the application to hang...