Skip to content
OpenAdvisories

Package · npm

parse-duration

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-25283

    parse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memory

    parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to ~50ms per o…

    jkroso parse-duration parse-duration npm