ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Mar 12, 2021 |
| Alpine Linux | — | Upgrade nodejs | Oct 1, 2024 | Mar 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 12, 2021 |
| Centos_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-debugsource | Aug 12, 2021 | Mar 12, 2021 |
| Debian | — | Upgrade node-ssri | Jul 30, 2024 | Mar 12, 2021 |
| Freebsd | — | Upgrade node14Upgrade node | Nov 4, 2022 | Sep 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.5-11.4.38.0.1.101.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-14 to version 14.17.6-11.4.38.0.1.101.2 on Solaris 11.4 | Nov 17, 2021 | Mar 12, 2021 |
| Oracle_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packaging | Aug 12, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-develNo solution existsUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-docs | Aug 12, 2021 | Mar 12, 2021 |
| Rocky_linux | — | Upgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs | May 5, 2022 | Mar 12, 2021 |
| Suse | — | Upgrade npm14Upgrade npm10Upgrade npm8Upgrade nodejs10-develUpgrade nodejs14-develUpgrade nodejs8-develUpgrade nodejs14Upgrade nodejs10Upgrade nodejs14-docsUpgrade nodejs12-develUpgrade npm12Upgrade nodejs8-docsUpgrade nodejs-commonUpgrade nodejs12Upgrade nodejs8Upgrade nodejs10-docsUpgrade nodejs12-docs | Jul 15, 2021 | Mar 12, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub