CVE-2025-2792
1 advisory.
npm/@mozilla/readability CVE-2025-2792: low
@mozilla/readability Denial of Service through Regex
Action: Upgrade @mozilla/readability to 0.6.0 or later.
npm i @mozilla/readability@0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-3p6v-hrg8-8qj7
- https://github.com/mozilla/readability/security/advisories/GHSA-3p6v-hrg8-8qj7
- https://github.com/mozilla/readability/commit/1c4d63be3e7344c3dfdf76ebb05fd0d32de93eb3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1948833
- https://github.com/mozilla/readability
CVE-2025-2792 · published · modified · JSON