domain-suffix RegEx Denial of Service

Description

RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.8

References

• GHSA-cqfh-c4c5-c2hg
• CVE-2024-25354
• CWE-1333
• CAPEC-310
• OWASP 2021-A6

Related Issues

• glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex - CVE-2020-28469
• Handling untrusted input can result in a crash, leading to loss of availability / denial of service - CVE-2024-30253
• youtube-regex vulnerable to Regex Denial of Service - CVE-2025-65122
• string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS) - CVE-2025-45143

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

domain-suffix