Skip to content
OpenAdvisories
Low CVE-2025-2792 GHSA-3p6v-hrg8-8qj7

@mozilla/readability Denial of Service through Regex

Published Mar 26, 2025 · Updated Mar 26, 2025 · Assigned by GHSA

Package: @mozilla/readability Ecosystem: npm

Description

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service.

Additional Details are [available at Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1948833)

Credit: DayShift

Affected packages

EcosystemPackageAffectedFixedRecord
npm @mozilla/readability < 0.6.0 0.6.0 GHSA-3p6v-hrg8-8qj7

References