CVE-2022-37620

7.5

HIGHCVSS v3

Published

October 31, 2022

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.

NPMHighly configurable, well-tested, JavaScript-based HTML minifier.

= 4.0.0, <= 4.0.0NVD

NPMTypeScript definitions for html-minifier-terser

<= 7.2.0NVD

NPM

Highly configurable, well-tested, JavaScript-based HTML minifier.

<= 7.2.0NVD

NPMTypeScript definitions for html-minifier

= 4.0.0, <= 4.0.0NVD

GitHubJavascript-based HTML compressor/minifier (with Node.js support)

= 4.0.0, <= 4.0.0NVD

GitHubactively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code

<= 7.2.0NVD