CVE-2026-67550 | uhop node-re2 up to 1.25.1 exec/test/match/replace/split lastIndex out-of-bounds

A vulnerability, which was classified as critical, was found in uhop node-re2 up to 1.25.1. The affected element is the function exec/test/match/replace/split. The manipulation of the argument lastIndex results in out-of-bounds read.

This vulnerability was named CVE-2026-67550. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More