CVE-2022-21195: Url-Regex Project Url-Regex

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.

Affected products

• Url-Regex Project Url-Regex: any version

Published 2022-05-20. Last modified 2026-06-17.