VULNERABILITY INTELLIGENCE

CVE-2022-1929

CVSS score5.9 MEDIUM
EPSS probability0.64%
CISA KEVNot currently listed
Published2022-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

Weakness classification

  • reefs@jfrog.com: CWE-1333
  • nvd@nist.gov: CWE-1333

Primary references