CVE-2026-71430
1 advisory.
npm/re2 CVE-2026-71430: medium 6.2, EPSS 0.16%
node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length
Action: Upgrade re2 to 1.25.1 or later.
npm i re2@1.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.25.1 | - |
Fixed versions
| 1.25.1 |
Sources
- osv: GHSA-8hcv-x26h-mcgp
- https://github.com/uhop/node-re2/security/advisories/GHSA-8hcv-x26h-mcgp
- https://github.com/uhop/node-re2
CVE-2026-71430 · published · modified · JSON