CVE-2022-25872: Fast String Search Project Fast String Search

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.

Affected products

• Fast String Search Project Fast String Search: any version

Published 2022-06-17. Last modified 2026-06-17.