`ssri`

Ecosystem:
npm

Package URL:
pkg:npm/ssri

Total PRs:
764 Dependabot PRs

Latest PR:
24 days ago

Unique Repositories:
655 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Regular Expression Denial of Service (ReDoS)

GHSA-vx3p-948g-6vhq CVE-2021-27290 HIGH published about 5 years ago • updated 5 days ago

npm `ssri` 5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could ...

Regular Expression Denial of Service in ssri

GHSA-325j-24f4-qv5x CVE-2018-7651 MODERATE published over 8 years ago • updated 19 minutes ago

Version of `ssri` prior to 5.2.2 are vulnerable to regular expression denial of service (ReDoS) when using strict mode. ## Recommendation Update...

Recent PRs

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 15 updates

CenturyLink/Chi #2071

12.0.0 → 14.0.0 Major PR

Closed 24 days ago 7 comments

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 14 updates

CenturyLink/Chi #2057

12.0.0 → 14.0.0 Major PR

Closed about 1 month ago 8 comments

deps: bump ssri from 13.0.1 to 14.0.0

npm/make-fetch-happen #356

13.0.1 → 14.0.0 Major PR

Closed about 1 month ago 1 comment

Bump ssri from 13.0.1 to 14.0.0 in the dev-dependencies group

KudoAI/amazongpt #112

13.0.1 → 14.0.0 Major PR

Open about 1 month ago 1 comment

Bump ssri from 13.0.1 to 14.0.0 in the dev-dependencies group

adamlui/chatgpt-widescreen #311

13.0.1 → 14.0.0 Major PR

Open about 1 month ago 1 comment

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 15 updates

CenturyLink/Chi #1979

12.0.0 → 13.0.1 Major PR

Open 3 months ago 8 comments

chore(deps): bump the minor-production-deps group with 6 updates

readmeio/api #1120

13.0.0 → 13.0.1 Patch PR

Closed 4 months ago 1 comment

Bump the dev-dependencies group across 17 directories with 8 updates

adamlui/ai-web-extensions #325

13.0.0 → 13.0.1 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the dependencies group across 1 directory with 2 updates

NodeSecure/scanner #645

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 7 updates

adamlui/ai-web-extensions #324

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 2 comments

deps(deps): bump the other-dependencies group across 1 directory with 53 updates

alderichoarau/alderichoarau.github.io #106

13.0.0 → 13.0.1 Patch PR

Closed 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 7 updates

adamlui/chatgpt-auto-continue #153

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 5 updates

adamlui/ai-web-extensions #320

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 4 updates

KudoAI/bravegpt #181

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 5 updates

adamlui/userscripts #206

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 4 comments

Bump the dev-dependencies group across 1 directory with 4 updates

KudoAI/duckduckgpt #171

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

chore(deps): Bump ssri from 13.0.0 to 13.0.1

openSUSE/qem-dashboard #3092

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 3 updates

KudoAI/bravegpt #180

13.0.0 → 13.0.1 Patch PR

Closed 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 4 updates

adamlui/userscripts #205

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

build(deps): bump ssri from 6.0.2 to 13.0.1 in /docs

MonCatCat/ag0 #151

6.0.2 → 13.0.1 Major PR

Closed 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 3 updates

KudoAI/amazongpt #100

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 2 comments

Bump the dev-dependencies group across 1 directory with 4 updates

adamlui/chatgpt-auto-continue #150

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 3 updates

KudoAI/duckduckgpt #170

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 4 updates

adamlui/chatgpt-widescreen #279

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 2 comments

Bump the dev-dependencies group with 3 updates

KudoAI/googlegpt #154

13.0.0 → 13.0.1 Patch PR

Open 4 months ago 1 comment

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 14 updates

CenturyLink/Chi #1935

12.0.0 → 13.0.0 Major PR

Open 5 months ago 11 comments

bump ssri from 6.0.1 to 6.0.2 in /examples/webpack

GlacierEQ/node-sdk #2

6.0.1 → 6.0.2 Patch PR

Open 5 months ago 2 comments

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 13 updates

CenturyLink/Chi #1927

12.0.0 → 13.0.0 Major PR

Open 5 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 42 updates

VarshithRegonda/docs #30

6.0.1 → 6.0.2 Patch PR

Closed 6 months ago 1 comment

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 14 updates

CenturyLink/Chi #1858

12.0.0 → 13.0.0 Major PR

Open 7 months ago 14 comments

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 13 updates

CenturyLink/Chi #1855

12.0.0 → 13.0.0 Major PR

Open 7 months ago 1 comment

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 12 updates

CenturyLink/Chi #1822

12.0.0 → 13.0.0 Major PR

Closed 7 months ago 9 comments

chore(deps): bump ssri from 10.0.6 to 13.0.0 in the dependencies group

NodeSecure/scanner #558

10.0.6 → 13.0.0 Major PR

Open 7 months ago 1 comment

Bump ssri from 12.0.0 to 13.0.0

jonkoops/Leaflet #73

12.0.0 → 13.0.0 Major PR

Closed 8 months ago 2 comments

Bump ssri from 9.0.1 to 13.0.0

TuanTayHo/leaflet-threaded #59

9.0.1 → 13.0.0 Major PR

Open 8 months ago 1 comment

[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 11 updates

CenturyLink/Chi #1799

12.0.0 → 13.0.0 Major PR

Open 8 months ago 12 comments

Bump ssri from 12.0.0 to 13.0.0 in the dev-dependencies group

adamlui/userscripts #179

12.0.0 → 13.0.0 Major PR

Open 8 months ago 1 comment

Bump the dev-dependencies group with 2 updates

KudoAI/duckduckgpt #151

12.0.0 → 13.0.0 Major PR

Closed 8 months ago 2 comments

Bump the dev-dependencies group with 2 updates

KudoAI/bravegpt #158

12.0.0 → 13.0.0 Major PR

Open 8 months ago 2 comments

Bump ssri

nomisK1/uir-editor #6

7.1.0 → 7.1.1 Patch PR

Closed 8 months ago 1 comment

Bump ssri from 6.0.1 to 6.0.2

tylerpetz/tyler.works #14

6.0.1 → 6.0.2 Patch PR

Closed 8 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 17 updates

aredridel/entropic #1

6.0.1 → 6.0.2 Patch PR

Open 9 months ago

Bump the npm_and_yarn group across 1 directory with 19 updates

hh54188/mobx-tutorial #25

6.0.1 → 6.0.2 Patch PR

Open 9 months ago

Bump ssri from 6.0.1 to 6.0.2 in /projects/02_trivia_api/starter/frontend

Manollo-36/FSND #4

6.0.1 → 6.0.2 Patch PR

Open 9 months ago

Bump the npm_and_yarn group across 1 directory with 23 updates

hh54188/webpack-chunk-test #2

6.0.1 → 6.0.2 Patch PR

Open 9 months ago

Bump ssri from 6.0.1 to 6.0.2

lizbethhahn/studio-ghibli-app #9

6.0.1 → 6.0.2 Patch PR

Open 9 months ago 1 comment

Bump ssri from 6.0.1 to 6.0.2 in /CarWash.PWA/ClientApp

mark-szabo/carwash #243

6.0.1 → 6.0.2 Patch PR

Closed 9 months ago

Bump ssri from 6.0.1 to 6.0.2

gringolito/esopedras-app #8

6.0.1 → 6.0.2 Patch PR

Closed 9 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 29 updates

cip8/size-limit #1

6.0.1 → 6.0.2 Patch PR

Open 9 months ago

Bump ssri in /src/Presentation/SpaWeb

Ivo120585/AuctionSystem #14

7.1.0 → 7.1.1 Patch PR

Open 10 months ago

Package Details

Name:	`ssri`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/ssri`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

Repository:	https://github.com/npm/ssri
Homepage:	https://github.com/npm/ssri#readme
Latest Release:	`12.0.0` over 1 year ago
Dependent Repos:	951,034
Dependent Packages:	838
Downloads:	141,581,547
Ranking:	Top 0.0359% by dependent repos Top 0.0107% by downloads Top 0.0791% by dependent pkgs

PR Status

Open 114 (14.9%)

Merged 60 (7.9%)

Closed 540 (70.7%)

PR Types

Major 38 (5.0%)

Patch 674 (88.2%)

Removal 1 (0.1%)