CVE-2022-25918
1 advisory.
npm/shescape CVE-2022-25918: high 7.5
Inefficient Regular Expression Complexity in shescape
Action: Upgrade shescape to 1.6.1 or later.
npm i shescape@1.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.10 | 1.6.1 | - |
Fixed versions
| 1.6.1 |
Sources
- osv: GHSA-cr84-xvw4-qx3c
- https://github.com/ericcornelissen/shescape/security/advisories/GHSA-cr84-xvw4-qx3c
- https://nvd.nist.gov/vuln/detail/CVE-2022-25918
- https://github.com/ericcornelissen/shescape/commit/552e8eab56861720b1d4e5474fb65741643358f9
- https://github.com/ericcornelissen/shescape
- https://github.com/ericcornelissen/shescape/blob/main/src/unix.js%23L52
- https://github.com/ericcornelissen/shescape/releases/tag/v1.6.1
- https://security.snyk.io/vuln/SNYK-JS-SHESCAPE-3061108
CVE-2022-25918 · published · modified · JSON