Ssri

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ssri_project:ssri:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorSsri Project (1459e1a5-a295-5068-b28d-6e4860b2fdec)
ProductSsri (4dcfa995-fc9e-5f28-815e-d763b08d2c8a)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/node-ssri purl2cpe 2026-06-01 10:17:27.602178
pkg:deb/ubuntu/node-ssri purl2cpe 2026-06-01 10:17:27.602180
pkg:github/npm/ssri purl2cpe 2026-06-01 10:17:27.602181
pkg:github/zkat/ssri purl2cpe 2026-06-01 10:17:27.602183
pkg:maven/org.webjars.npm/ssri purl2cpe 2026-06-01 10:17:27.602184
pkg:npm/ssri purl2cpe 2026-06-01 10:17:27.602186

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27290 vulnerable 2026-06-08 05:31:20.960100 Details available
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
Published: 2021-03-12T21:47:41.000Z
Updated: 2024-08-03T20:48:16.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7651 vulnerable 2026-06-08 05:12:03.943535 Details available
index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.
Published: 2018-03-04T01:00:00.000Z
Updated: 2024-09-16T22:25:51.602Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.