npm

re2

View on npm registry

2 Total advisories

2 Vulnerabilities

0 Malware

Vulnerabilities

CVE-2026-68499

re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)

CVE-2026-67550

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes