CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-25851
High (7.5) in jpeg-js project jpeg-js. EPSS 1.9% chance of exploitation in the next 30 days. Fixed in jpeg-js 0.4.4.
The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never return.
Severity
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jpeg-js_project:jpeg-js
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-xvf7-4v9q-58w6 | npm | jpeg-js | <0.4.4 | 0.4.4 |