PT-2025-27455
CVE-2025-45143
·
Published
2025-06-30
·
Updated
2025-10-18
Description by
CVSS 3.1
7.0
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
string-math version 1.2.2
Description:
The issue is a Regex Denial of Service (ReDoS) that can be exploited via a crafted input.
Recommendations:
For string-math version 1.2.2, consider validating and sanitizing all inputs to prevent crafted inputs from exploiting the ReDoS issue. As a temporary workaround, restrict the use of the
string-math library until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾