index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.
{
"cpe": "cpe:2.3:a:ssri_project:ssri:*:*:*:*:*:node.js:*:*",
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "5.2.2"
}
]
}{
"cpe": "cpe:2.3:a:ssri_project:ssri:*:*:*:*:*:node.js:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "5.2.2"
}
]
}