CVE-2026-68499

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68499", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-30T16:19:08.081Z", "datePublished": "2026-07-30T20:07:01.147Z", "dateUpdated": "2026-07-31T19:19:08.646Z"}, "containers": {"cna": {"title": "re2: Global `String.prototype.match` with an empty-matchable pattern never advances \u2192 infinite loop with unbounded native memory growth (DoS)", "problemTypes": [{"descriptions": [{"cweId": "CWE-835", "lang": "en", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836"}, {"name": "https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d", "tags": ["x_refsource_MISC"], "url": "https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d"}, {"name": "https://github.com/uhop/node-re2/releases/tag/1.25.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/uhop/node-re2/releases/tag/1.25.2"}], "affected": [{"vendor": "uhop", "product": "node-re2", "versions": [{"version": "< 1.25.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-30T20:07:01.147Z"}, "descriptions": [{"lang": "en", "value": "re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2."}], "source": {"advisory": "GHSA-6hxr-mr5r-9836", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-31T19:18:39.668208Z", "id": "CVE-2026-68499", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:19:08.646Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-68499", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T19:18:39.668208Z"}}}], "references": [{"url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:19:01.238Z"}}], "cna": {"title": "re2: Global `String.prototype.match` with an empty-matchable pattern never advances \u2192 infinite loop with unbounded native memory growth (DoS)", "source": {"advisory": "GHSA-6hxr-mr5r-9836", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "uhop", "product": "node-re2", "versions": [{"status": "affected", "version": "< 1.25.2"}]}], "references": [{"url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836", "name": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d", "name": "https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/uhop/node-re2/releases/tag/1.25.2", "name": "https://github.com/uhop/node-re2/releases/tag/1.25.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-835", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-30T20:07:01.147Z"}}}, "cveMetadata": {"cveId": "CVE-2026-68499", "state": "PUBLISHED", "dateUpdated": "2026-07-31T19:19:08.646Z", "dateReserved": "2026-07-30T16:19:08.081Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-30T20:07:01.147Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "node-re2", "vendor": "uhop", "versions": [{"status": "affected", "version": "< 1.25.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded native memory growth that blocks the event loop and can exhaust host memory. This issue is fixed in 1.25.2."}, {"lang": "es", "value": "re2 proporciona enlaces para Node.js para el motor de expresiones regulares RE2 de Google. Antes de la versi\u00f3n 1.25.2, la implementaci\u00f3n de String.prototype.match de re2 con un patr\u00f3n RE2 global que puede coincidir con la cadena vac\u00eda no logra avanzar su cursor de coincidencia nativo en lib/match.cc, causando un bucle infinito y un crecimiento ilimitado de la memoria nativa que bloquea el bucle de eventos y puede agotar la memoria del host. Este problema est\u00e1 solucionado en la versi\u00f3n 1.25.2."}], "id": "CVE-2026-68499", "lastModified": "2026-10-23T22:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-68499", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-31T19:18:39.668208Z", "version": "2.0.3"}}]}, "published": "2026-07-30T21:18:12.870", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d"}, {"source": "security-advisories@github.com", "url": "https://github.com/uhop/node-re2/releases/tag/1.25.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-835"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.25.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "node-re2", "source": "cna", "vendor": "uhop"}, "product": "node-re2", "vendor": "uhop"}], "created": "2026-07-31T19:30:04.189768+00:00", "updated": "2026-08-03T10:30:18.425089+00:00", "vendors": ["uhop", "uhop$PRODUCT$node-re2"]}