Denial of Service (DoS) vulnerability in RSSHub

Description

Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.0

References

• GHSA-jvxx-v45p-v5vf
• CVE-2022-31110
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• mongosh vulnerable to local privilege escalation - CVE-2025-1756
• Elliptic's EDDSA missing signature length check - CVE-2024-42459
• Nuxt Devtools has a Path Traversal: '../filedir - CVE-2024-23657
• Incorrect default cookie name and recommendation - Vulnerability

Tags:

npm

rsshub