PatchSiren

rdfjs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH rdfjs CVE published 2026-10-12

CVE-2026-109563

CVE-2026-109563 is a high-severity vulnerability in N3.js before version 2.11.1, which can cause a denial of service via a regular expression denial of service (ReDoS) attack. The vulnerability is located in the N3Lexer number pattern and can be triggered by supplying untrusted Turtle or N3 input containing long runs of digits. This vulnerability can cause the Node.js event loop to block, leading to a den [truncated]