N3.js vulnerabilities

CVEs whose affected-version data names the N3.js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109563High· 7.5

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of d…

▾ Twilightrdfjs · N3.jsEPSS 0.35%via NVD

N3.js vulnerabilities (CVEs) · VulnSea