{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.3"}],"component":"org.webjars.npm:cookiejar","cve_ids":["CVE-2022-25901"],"ecosystem":"Maven","epss":0.0159,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h452-7996-h45h","id":"tcs_01M5N8ZJW51B78XSRWAPJF3RZ7","modified_at":"2025-02-13T19:03:25.062781Z","published_at":"2023-01-18T06:31:03Z","references":["https://osv.dev/vulnerability/GHSA-h452-7996-h45h","https://nvd.nist.gov/vuln/detail/CVE-2022-25901","https://github.com/bmeck/node-cookiejar/pull/39","https://github.com/bmeck/node-cookiejar/pull/39/commits/eaa00021caf6ae09449dde826108153b578348e5","https://github.com/bmeck/node-cookiejar","https://github.com/bmeck/node-cookiejar/blob/master/cookiejar.js#23L73","https://github.com/bmeck/node-cookiejar/blob/master/cookiejar.js%23L73","https://lists.debian.org/debian-lts-announce/2023/09/msg00008.html","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3176681","https://security.snyk.io/vuln/SNYK-JS-COOKIEJAR-3149984"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h452-7996-h45h#Maven/org.webjars.npm:cookiejar","url":"https://osv.dev/vulnerability/GHSA-h452-7996-h45h"}],"summary":"cookiejar Regular Expression Denial of Service via Cookie.parse function"}