Denial of Service (DoS) vulnerability in RSSHub

Description

Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services.

Recommendation

No fix is available yet. Followings are affected versions:

<= 1.0.0

References

GHSA-jvxx-v45p-v5vf
CVE-2022-31110
CWE-1333
CWE-400
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Denial of Service (DoS) vulnerability in RSSHub and gives you actionable findings to investigate.

Start a free scan

Related Issues

decode-uri-component vulnerable to Denial of Service (DoS) - CVE-2022-38900
jsPDF Denial of Service (DoS) - CVE-2025-57810
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability - CVE-2026-22809
angular vulnerable to regular expression denial of service (ReDoS) - CVE-2022-25844

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

How do hackers hack websites?

See something that needs correcting? Let us knowUpdated July 24, 2023