Approved changes feed: RSS · Atom

cpe:2.3:a:nitrado.js_project:nitrado.js:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorNitrado.Js Project (92fa664c-2aea-5c07-a7a3-f15812a6405b)
ProductNitrado.Js (f4c7f6df-6f7f-5b35-ac1e-823e809677a5)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36034 vulnerable 2026-06-08 05:46:06.199374 Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js
HIGH (7.5)
nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.
Published: 2022-08-29T16:50:09.000Z
Updated: 2025-04-23T17:47:33.540Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.