CVE-2022-36034: Nitrado.js Project Nitrado.js

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

Affected products

• Nitrado.js Project Nitrado.js: before 0.2.5 (fixed in 0.2.5)

Published 2022-08-29. Last modified 2026-06-17.