What is GHSA-vpxx-h23g-gxh2?

GHSA-vpxx-h23g-gxh2 is a security advisory published by GitHub Security Advisories with High severity. youtube-regex vulnerable to Regex Denial of Service

Which CVE IDs does GHSA-vpxx-h23g-gxh2 cover?

GHSA-vpxx-h23g-gxh2 covers the following CVE IDs: CVE-2025-65122. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vpxx-h23g-gxh2?

GHSA-vpxx-h23g-gxh2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-vpxx-h23g-gxh2?

GHSA-vpxx-h23g-gxh2 affects 1 product, including: npm/youtube-regex:\u003c= 1.0.5.

GHSA-vpxx-h23g-gxh2HighCVSS 7.5

youtube-regex vulnerable to Regex Denial of Service

Vendor

GitHub Security Advisories

Published

May 7, 2026

Last Modified

May 12, 2026

🔗 CVE IDs covered (1)

CVE-2025-65122 →

📋 Description

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

🎯 Affected products1

npm/youtube-regex:<= 1.0.5

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-65122
https://github.com/regexhq/youtube-regex/issues/14
https://gist.github.com/6en6ar/66ef99397068c0a5e0d963bc47d7172c
https://github.com/advisories/GHSA-vpxx-h23g-gxh2