What’s Vulnerable › Products

uhop node-re2 vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your uhop node-re2 version is affected

Latest uhop node-re2 vulnerabilities

• CVE-2026-71498 — node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript (CVSS 5.1)
• CVE-2026-71430 — node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length (CVSS 6.2)
• CVE-2026-68499 — re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS) (CVSS 6.2)
• CVE-2026-67550 — re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS) (CVSS 5.7)