Orta CVSS 6.2
CVE-2026-68499: CVE-2026-68499: güvenlik açığı
Açıklama (NVD)
re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2.
Özet bilgiler
- CVSS v3.1
- 6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-835
- Yama
- Yok / bilinmiyor