Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-36034

Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js

Description

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

cainthebest nitrado.js

  • < 0.2.5affected

References