{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.8"}],"component":"domain-suffix","cve_ids":["CVE-2024-25354"],"ecosystem":"npm","epss":0.00575,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cqfh-c4c5-c2hg","id":"tcs_01M5KFKB2NCN16W3HRHFXZX68X","modified_at":"2025-09-03T15:16:09Z","published_at":"2024-03-28T00:31:40Z","references":["https://osv.dev/vulnerability/GHSA-cqfh-c4c5-c2hg","https://nvd.nist.gov/vuln/detail/CVE-2024-25354","https://gist.github.com/6en6ar/c3b11b4058b8e2bc54717408d451fb79","https://github.com/ikrong/domain-suffix","https://github.com/ikrong/domain-suffix/blob/master/src/domainSuffix.ts"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqfh-c4c5-c2hg","url":"https://osv.dev/vulnerability/GHSA-cqfh-c4c5-c2hg"}],"summary":"domain-suffix RegEx Denial of Service"}