Skip to content
OpenAdvisories
High · 7.5 CVE-2022-36034 EUVD-2022-6635GHSA-vqc4-v8hc-h2jg

Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js

Published Aug 29, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

Affected products

VendorProductAffectedFixed
cainthebest nitrado.js < 0.2.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm nitrado.js < 0.2.5 0.2.5 GHSA-vqc4-v8hc-h2jg

References