{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.1"}],"component":"js-video-url-parser","cve_ids":["CVE-2026-5986"],"ecosystem":"npm","epss":0.00372,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8fgx-wgvr-pcx8","id":"tcs_01M5KFCQWSNR2N4PHZJA7WFEK2","modified_at":"2026-04-10T20:56:24.699669Z","published_at":"2026-04-10T00:30:31Z","references":["https://osv.dev/vulnerability/GHSA-8fgx-wgvr-pcx8","https://nvd.nist.gov/vuln/detail/CVE-2026-5986","https://github.com/Zod-/jsVideoUrlParser/issues/121","https://github.com/Zod-/jsVideoUrlParser/issues/121#issue-4159661957","https://github.com/Zod-/jsVideoUrlParser","https://vuldb.com/submit/791911","https://vuldb.com/vuln/356540","https://vuldb.com/vuln/356540/cti"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-8fgx-wgvr-pcx8","url":"https://osv.dev/vulnerability/GHSA-8fgx-wgvr-pcx8"}],"summary":"Zod jsVideoUrlParser vulnerable to ReDoS in util.js"}