CVE-2018-7651: Ssri Project Ssri

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.

Affected products

• Ssri Project Ssri: before 5.2.2 (fixed in 5.2.2)

Published 2018-03-04. Last modified 2026-06-17.