High, CVSS 8.7npmAmendedPublished
Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity
CVE-2025-58451 · GHSA-455v-w7r9-3vv9
- Affected
- npm cattown < 1.0.2
- Fixed in
- 1.0.2· Vendor fix available
- Issue
- A security review of the Cattown identified multiple weaknesses that could potentially impact its stability and security. Affected Versions - All versions below 1.0.2 Description of Vulnerabilities 1. CWE-1333: Inefficient Regular Expression Complexity The package used regular expressions with inefficient, potentially exponential worst-case complexity. This can cause excessive CPU usage due to excessive backtracking on crafted inputs, potentially leading to denial of service. 2. CWE-400: Uncontrolled Resource Consumption (Resource Exhaustion) The package was vulnerable to resource exhaustion, where processing malicious inputs could cause high CPU or memory usage, potentially leading to denial of service. Impact - Trigger excessive CPU consumption leading to denial of service - Cause resource exhaustion affecting service availability - Bypass protection mechanisms causing unexpected or insecure behavior Resolution These vulnerabilities have been fixed in version 1.0.2 of the…
Recommended action: Upgrade to 1.0.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.