Description
Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service.
Additional Details are available at Bugzilla
Credit: DayShift
Recommendation
Update the @mozilla/readability package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.6.0
- Patched version(s): 0.6.0
References
Related Issues
- protobuf.js: Process-wide denial of service through unsafe option paths - CVE-2026-44290
- jsPDF Denial of Service (DoS) - CVE-2025-57810
- jsPDF Bypass Regular Expression Denial of Service (ReDoS) - CVE-2025-29907
- SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering - @sveltejs/adapter-node - CVE-2025-67647
You might also like:
- Tags:
- npm
- @mozilla/readability
Anything's wrong? Let us know Last updated on March 26, 2025