Denial of Service (DoS) vulnerability in RSSHub

Description

Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.0

References

• GHSA-jvxx-v45p-v5vf
• CVE-2022-31110
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• decode-uri-component vulnerable to Denial of Service (DoS) - CVE-2022-38900
• jsPDF Denial of Service (DoS) - CVE-2025-57810
• tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability - CVE-2026-22809
• angular vulnerable to regular expression denial of service (ReDoS) - CVE-2022-25844

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

How do hackers hack websites?

Tags:

npm

rsshub