VYPR
Medium severity6.5NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026

CVE-2024-36751

CVE-2024-36751

Description

An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
parse-urinpm
<= 1.0.9
parseurinpm
>= 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.