What is CVE-2026-71430?

CVE-2026-71430 is a medium-severity vulnerability in Uhop Node-re2, classified under Reachable Assertion. CVSS score: 6.2/10. Published 2026-08-06.

How severe is CVE-2026-71430?

Medium severity. CVSS v3 base score is 6.2 out of 10.

Vulnerability in Uhop Node-re2

CVE-2026-71430

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLocalChecked without checking for the empty MaybeLocal that V…

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Uhop Node-re2 — versions < 1.25.1

Weakness classification (CWE)

CWE-617 — Reachable Assertion

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2026-71430?: CVE-2026-71430 is a medium-severity vulnerability in Uhop Node-re2, classified under Reachable Assertion. CVSS score: 6.2/10. Published 2026-08-06.
How severe is CVE-2026-71430?: Medium severity. CVSS v3 base score is 6.2 out of 10.