CVE-2024-25354
1 advisory.
npm/domain-suffix CVE-2024-25354: high 7.5, EPSS 0.57%
domain-suffix RegEx Denial of Service
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cqfh-c4c5-c2hg
- https://nvd.nist.gov/vuln/detail/CVE-2024-25354
- https://gist.github.com/6en6ar/c3b11b4058b8e2bc54717408d451fb79
- https://github.com/ikrong/domain-suffix
- https://github.com/ikrong/domain-suffix/blob/master/src/domainSuffix.ts
CVE-2024-25354 · published · modified · JSON