{"id":"EUVD-2022-6634","revision":"874f2d1e65b5433db7dd7f6980106872","records":[{"revision":"874f2d1e65b5433db7dd7f6980106872","observedAt":"2026-11-01T20:58:37.885+00:00","statement":{"source":"euvd","id":"EUVD-2022-6634","aliases":["CVE-2022-2596","GHSA-vp56-6g26-6827"],"title":"Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.","description":"Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","score":5.9,"severity":null}],"references":["https://huntr.dev/bounties/a7e6a136-0a4b-46c4-ad20-802f1dd60bf7","https://github.com/node-fetch/node-fetch/commit/28802387292baee467e042e168d92597b5bbbe3d"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6634","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 1, 2022, 2:13:20 PM","dateUpdated":"Oct 7, 2026, 6:54:27 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2022-6634","identifiers":["EUVD-2022-6634","CVE-2022-2596","GHSA-vp56-6g26-6827"]},"retained":false,"historicalAffected":[]}],"coverage":[]}