7.5
High
CVE-2022-25851 The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will…
Description
The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never return.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jpeg-js 0.4 | earliest → < 0.4.4 | 0.4.4 |