CVE-2024-25354: Npmjs Domain-Suffix

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.

Affected products

• Npmjs Domain-Suffix: version 1.0.8 only

Published 2024-03-27. Last modified 2026-06-17.