Product

npm string-math vulnerabilities

1 published CVE affecting npm string-math, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest npm string-math CVEs

Newest publication first

CVE-2025-45143 string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
Published 2025-06-30

HighCVSS 7.0

string-math v1.2.2 was discovered to contain a Regex Denial of Service (ReDoS) which is exploited via a crafted input.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

npm string-math vulnerabilities

Latest npm string-math CVEs

CVE-2025-45143 string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)