GitHub Advisoryadvisory · npm

GHSA-vpxx-h23g-gxh2 youtube-regex vulnerable to Regex Denial of Service

HIGH Published 2026-05-07 Modified 2026-05-12 Official page ↗

Aliases: CVE-2025-65122
Ecosystem: npm
Packages: youtube-regex
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
Reviewed: 2026-05-12

Affected packages

• npm youtube-regex: <= 1.0.5 (no fix yet)

Description

Regex Denial of Service in youtube-regex npm package through version 1.0.5.

Related

Alias · CVE (1)

CVE-2025-65122 Regex Denial of Service in youtube-regex npm package through version 1.0.5. vulnerability

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References