CVE-2025-58451

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-58451
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58451.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-58451
Aliases
Published
2025-09-08T22:07:48.516Z
Modified
2026-04-10T05:32:11.883003Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Cattown Vulnerable to Inefficient Regular Expression Complexity and Uncontrolled Resource Consumption
Details

Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource exhaustion, where processing malicious inputs could cause high CPU or memory usage, potentially leading to denial of service. Version 1.0.2 contains a patch. Additionally, users should review and restrict input sources if untrusted inputs are processed.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58451.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1333",
        "CWE-400"
    ]
}
References

Affected packages

Git / github.com/ieaturanium238/cattown

Affected ranges

Type
GIT
Repo
https://github.com/ieaturanium238/cattown
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
70c2a28fb7dc520cfb7e401e0e141bff3dd26ead

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58451.json"