CVE-2022-36034

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

Score

CVSS 3.1 7.5 High

Status

Modified - security-advisories@github.com

Published

2022-08-29

Last modified

2025-04-23

Weaknesses

CWE-1333, CWE-400

Affected products

• Nitrado.js (Cainthebest)
• Nitrado.js (Nitrado.js Project)

References

• https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md
• https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg