Ssri Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ssri Project records in CISA KEV

No Ssri Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ssri 2 records MEDIUM

Records

2 records in Ssri · all components

TI-2021-08824 CVE-2021-27290 · GHSA-vx3p-948g-6vhq

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is…

MEDIUM 40

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0472 Published 2021-03-12 Partial fix · 6.0.2, 7.1.1 +1 CWE-400

TI-2018-05513 CVE-2018-7651 · GHSA-325j-24f4-qv5x

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression…

LOW 30

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01714 Published 2018-03-04 Fixed in 5.2.2 CWE-400

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0