Approved changes feed: RSS · Atom

cpe:2.3:a:alexcorvi:anchorme:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlexcorvi (146b1085-6427-5c46-8bb5-18abb319ad4f)
ProductAnchorme (41cb855b-f6bc-50bb-ab7f-2c76fa8a0aba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-103043 vulnerable 2026-11-03 10:15:49.197020 anchorme through 3.0.8 Regular Expression Denial of Service
HIGH (7.5)
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js event loop and denying service to other requests.
Published: 2026-09-29T22:51:02.576Z
Updated: 2026-10-20T01:48:52.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.