Approved changes feed: RSS · Atom
cpe:2.3:a:rdfjs:n3.js:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Rdfjs (3f9457ac-561f-5a8d-8c66-ed324ef61519) |
|---|---|
| Product | N3.Js (cb1b09c8-1e0c-58fa-a3f8-ff5885a48705) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-109563 |
vulnerable | 2026-11-03 10:17:40.177108 |
N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
HIGH (7.5)
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event loop and causing denial of service.
Published: 2026-10-12T20:55:16.880Z
Updated: 2026-10-14T11:33:26.609Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.