ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Mar 12, 2021 |
| Alpine Linux | — | Upgrade nodejs | Oct 1, 2024 | Mar 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 12, 2021 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-nodemon | Aug 12, 2021 | Mar 12, 2021 |
| Debian | — | Upgrade node-ssri | Jul 30, 2024 | Mar 12, 2021 |
| Freebsd | — | Upgrade node14Upgrade node | Nov 4, 2022 | Sep 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-14 to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.5-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4 | Nov 17, 2021 | Mar 12, 2021 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-nodemon | Aug 12, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-docsNo solution existsUpgrade nodejs-packagingUpgrade nodejs | Aug 12, 2021 | Mar 12, 2021 |
| Rocky_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-devel | May 5, 2022 | Mar 12, 2021 |
| Suse | — | Upgrade nodejs8Upgrade nodejs14-docsUpgrade nodejs10-docsUpgrade nodejs-commonUpgrade nodejs8-docsUpgrade nodejs12Upgrade nodejs12-develUpgrade nodejs12-docsUpgrade nodejs14Upgrade npm12Upgrade nodejs10Upgrade nodejs14-develUpgrade npm14Upgrade npm8Upgrade npm10Upgrade nodejs10-develUpgrade nodejs8-devel | Jul 15, 2021 | Mar 12, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub