What is GHSA-qv66-f876-vjvr?

GHSA-qv66-f876-vjvr is a security advisory published by GitHub Security Advisories with High severity. skeemas Inefficient Regular Expression Complexity vulnerability

Which CVE IDs does GHSA-qv66-f876-vjvr cover?

GHSA-qv66-f876-vjvr covers the following CVE IDs: CVE-2018-25074. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qv66-f876-vjvr?

GHSA-qv66-f876-vjvr has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-qv66-f876-vjvr?

GHSA-qv66-f876-vjvr affects 1 product, including: npm/skeemas:\u003c 1.2.5.

GHSA-qv66-f876-vjvrHighCVSS 7.5

skeemas Inefficient Regular Expression Complexity vulnerability

Vendor

GitHub Security Advisories

Published

January 11, 2023

Last Modified

October 20, 2023

🔗 CVE IDs covered (1)

CVE-2018-25074 →

📋 Description

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The name of the patch is 65e94eda62dc8dc148ab3e59aa2ccc086ac448fd. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218003.

🎯 Affected products1

npm/skeemas:< 1.2.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-25074
https://github.com/Prestaul/skeemas/commit/65e94eda62dc8dc148ab3e59aa2ccc086ac448fd
https://vuldb.com/?ctiid.218003
https://vuldb.com/?id.218003
https://github.com/advisories/GHSA-qv66-f876-vjvr