re2 Security Advisories - Npm | Ecosyste.ms: Advisories

re2

Bindings for RE2: fast, safe alternative to backtracking regular expression engines.

View on github.com · View on npmjs.org

Security Advisories for re2 in npm

Moderate

21 days ago

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript GSA_kwCzR0hTQS1qNHIzLWhnN2otOGNoZ84ABhoh

npm re2

Moderate

21 days ago

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length GSA_kwCzR0hTQS04aGN2LXgyNmgtbWNncM4ABhog

npm re2

Moderate

27 days ago

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS) GSA_kwCzR0hTQS1mZjg0LTVmMjgtNzhxas4ABg-J

npm re2

Moderate

27 days ago

re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS) GSA_kwCzR0hTQS02aHhyLW1yNXItOTgzNs4ABg-I

npm re2

Filter by Severity