Description
Regex Denial of Service in youtube-regex npm package through version 1.0.5.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.0.5
References
Could your website be exposed too?
SmartScanner can check your website for youtube-regex vulnerable to Regex Denial of Service and gives you actionable findings to investigate.
Start a free scanRelated Issues
- SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering - CVE-2025-67647
- glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex - CVE-2020-28469
- string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS) - CVE-2025-45143
- @mozilla/readability Denial of Service through Regex - CVE-2025-2792
You might also like:
See something that needs correcting? Let us knowUpdated May 12, 2026