PT-2018-18185

Name of the Vulnerable Software and Affected Versions ssri versions prior to 5.2.2 Description The issue is related to a regular expression denial of service vulnerability in the strict mode functionality of the ssri module. This vulnerability can be triggered via a long base64 hash string...

CVE-2018-7651: Uncontrolled Resource Consumption

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

Regular Expression Denial Of Service (ReDoS)

ssri is vulnerable to regular expression denial of service ReDoS attacks. If an application is using the opts.strict option, attackers can inject extremely long base64 hash strings to cause the application to hang...