Description
RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | domain-suffix | <= 1.0.8 | — | GHSA-cqfh-c4c5-c2hg |
High · 7.5
CVE-2024-25354
EUVD-2024-0905GHSA-cqfh-c4c5-c2hg
domain-suffix RegEx Denial of Service
Published Mar 27, 2024 · Updated Mar 14, 2025 · Assigned by mitre