CVE-2021-27290

CVE-2021-27290 affects the ssri npm module used by Node.js. Connected advisories confirm a Regular Expression Denial of Service (ReDoS) when parsing malicious SRIs in strict mode. The issue is fixed in ssri 8.0.1; remediation typically involves upgrading the affected Node.js package family (e.g.,...

CVE-2018-7651

The CVE-2018-7651 entry concerns the Node.js ssri module. Affected component: index.js in ssri prior to 5.2.2. Root cause: a regular expression denial of service (ReDoS) in strict mode triggered by a long base64 hash string. Impact: potential DoS condition; no exploitation specifics provided in t...