CVE-2018-25077: mel-spintax has Inefficient Regular Expression Complexity

January 18, 2023 (updated February 17, 2026)

A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is 37767617846e27b87b63004e30216e8f919637d3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218456.

References

github.com/advisories/GHSA-qjm7-55vv-3c5f
github.com/melnaron/mel-spintax
github.com/melnaron/mel-spintax/commit/37767617846e27b87b63004e30216e8f919637d3
nvd.nist.gov/vuln/detail/CVE-2018-25077
vuldb.com/?id.218456

Code Behaviors & Features

Detect and mitigate CVE-2018-25077 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →