youtube-regex vulnerable to Regex Denial of Service

Description

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.5

References

• GHSA-vpxx-h23g-gxh2
• CVE-2025-65122
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering - CVE-2025-67647
• glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex - CVE-2020-28469
• string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS) - CVE-2025-45143
• @mozilla/readability Denial of Service through Regex - CVE-2025-2792

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

youtube-regex