VYPR

npm package

js-video-url-parser

pkg:npm/js-video-url-parser

Vulnerabilities (1)

  • CVE-2026-5986MedApr 9, 2026
    affected <= 0.5.1

    A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotel