Skip to content
OpenAdvisories

Package · Debian

node-ssri

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-27290

    Regular Expression Denial of Service (ReDoS)

    ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the stri…

    nodejs node-ssri ssri node-ssri Debian Ubuntu Alpine npm