Denial of Service (DoS) vulnerability in RSSHub

Description

Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.0

References

• GHSA-jvxx-v45p-v5vf
• CVE-2022-31110
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter - CVE-2022-24901
• jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch - CVE-2026-24001
• Knwl.js Regular Expression Denial of Service vulnerability - CVE-2020-26306
• jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method - CVE-2022-31147

Tags:

npm

rsshub