Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-27290 — HIGH severity vulnerability | Release Alert

CVE-2021-27290

7.5

HIGHCVSS v3

Published

March 12, 2021

CVSS v2

4.3 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

NPMStandard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

>= 7.0.0, < 8.0.1, >= 5.2.2, < 6.0.2NVD

GitHubsubresource integrity for npm

>= 7.0.0, < 8.0.1, >= 5.2.2, < 6.0.2NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for ssri

>= 7.0.0, < 8.0.1, >= 5.2.2, < 6.0.2NVD

GitHubStandard Subresource Integrity library for Node.js

>= 7.0.0, < 8.0.1, >= 5.2.2, < 6.0.2NVD