What is GHSA-qjm7-55vv-3c5f?

GHSA-qjm7-55vv-3c5f is a security advisory published by GitHub Security Advisories with Medium severity. mel-spintax has Inefficient Regular Expression Complexity

Which CVE IDs does GHSA-qjm7-55vv-3c5f cover?

GHSA-qjm7-55vv-3c5f covers the following CVE IDs: CVE-2018-25077. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qjm7-55vv-3c5f?

GHSA-qjm7-55vv-3c5f has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-qjm7-55vv-3c5f?

GHSA-qjm7-55vv-3c5f affects 1 product, including: npm/mel-spintax:\u003c 1.0.3.

GHSA-qjm7-55vv-3c5fMediumCVSS 4.3

mel-spintax has Inefficient Regular Expression Complexity

Vendor

GitHub Security Advisories

Published

January 18, 2023

Last Modified

February 17, 2026

🔗 CVE IDs covered (1)

CVE-2018-25077 →

📋 Description

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is 37767617846e27b87b63004e30216e8f919637d3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218456.

🎯 Affected products1

npm/mel-spintax:< 1.0.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-25077
https://github.com/melnaron/mel-spintax/commit/37767617846e27b87b63004e30216e8f919637d3
https://vuldb.com/?id.218456
https://github.com/advisories/GHSA-qjm7-55vv-3c5f