Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:34:56 +0000 CVE-2026-68499 — re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded nati… https://vulnerability.circl.lu/vuln/cve-2026-68499 <p><strong>Affected:</strong> uhop node-re2</p> <p>re2 provides Node.js bindings for Google&#39;s RE2 regular expression engine. Prior to 1.25.2, re2&#39;s String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2.</p> <p><strong>Affected:</strong> uhop node-re2</p> <p>re2 provides Node.js bindings for Google&#39;s RE2 regular expression engine. Prior to 1.25.2, re2&#39;s String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2.</p> https://vulnerability.circl.lu/vuln/cve-2026-68499