Skip to content
OpenAdvisories

Package · Debian

node-ssri

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-27290

    Regular Expression Denial of Service (ReDoS)

    ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the stri…

    nodejs node-ssri ssri node-ssri Debian Ubuntu Alpine npm
  • Medium 5.9
    CVE-2018-7651

    Regular Expression Denial of Service in ssri

    index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.

    ssri node-ssri node-ssri Debian Ubuntu npm