CVE-2022-37620

A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.

  • Published Oct 31, 2022
  • CVSS 7.5 high
  • 1.2% chance of exploitation in the next 30 days (EPSS)

In the news

CVE-2022-37620 at the National Vulnerability Database