regexhq CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH regexhq CVE published 2026-05-07

CVE-2025-65122

A Regex Denial of Service vulnerability exists in the youtube-regex npm package through version 1.0.5. This issue, tracked as CVE-2025-65122, has a CVSS score of 7.5 and is classified as HIGH severity. The vulnerability allows for a denial of service via a specially crafted regular expression. The CVE record was published on 2026-05-07T16:16:17.810Z and was last modified on 2026-11-04T20:10:00.263Z.