CVE-2018-7158

CVE-2018-7158 describes a Regular Expression Denial of Service (ReDoS) vulnerability within the 'path' module of Node.js 4.x. An attacker can craft a malicious string that, when processed by functions like path.dirname() or path.parse(), causes the regular expression to consume excessive CPU resources, leading to a denial of service. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, resulting in high availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.