This vulnerability involves a Regular Expression Denial of Service (ReDoS) in the youtube-regex npm package versions up to 1.0.5. An attacker could potentially craft input that triggers excessive backtracking in the regular expression engine, leading to high CPU usage and denial of service conditions. The CVE entry does not provide a CVSS score or detailed technical information beyond the vulnerability type and affected package version. No remediation level or patch information is provided, and no known exploits have been reported.

The impact of this vulnerability is a potential denial of service caused by resource exhaustion when processing specially crafted input through the vulnerable regular expression. This could affect applications using the youtube-regex package, leading to degraded performance or service outages. There is no indication of data compromise or other impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider mitigating exposure by limiting or sanitizing inputs processed by the vulnerable regular expression or temporarily removing the package if feasible. Monitor official sources for updates.