{"action":"Upgrade @asymmetric-effort/nogginlessdom to 0.0.22 or later.","affected":[{"fixed":"0.0.22","introduced":"0"}],"component":"@asymmetric-effort/nogginlessdom","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.0.22"],"ghsa_id":"GHSA-x4hg-hfwf-p9mw","id":"tcs_01M5KGGW238Z43ERVGM4NDW3KB","modified_at":"2026-09-10T03:50:53.053866960Z","published_at":"2026-07-02T20:20:04Z","references":["https://osv.dev/vulnerability/GHSA-x4hg-hfwf-p9mw","https://github.com/asymmetric-effort/NogginLessDom/security/advisories/GHSA-x4hg-hfwf-p9mw","https://github.com/asymmetric-effort/NogginLessDom/commit/25a3cbac665fae5663f8b71c073b80c3152dbe7b","https://github.com/asymmetric-effort/NogginLessDom"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x4hg-hfwf-p9mw","url":"https://osv.dev/vulnerability/GHSA-x4hg-hfwf-p9mw"}],"summary":"@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation"}