CVE-2025-69873

EUVD-2025-207389

11.02.2026, 19:15

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	2.9 LOW	LOCAL	HIGH	NONE	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 40.32%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:2.5.20260422-2.el8ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:2.5.20260422-2.el9ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	0:2.6.7-1.el9ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7	0:7.3.18-3.GA_redhat_00001.1.el7eap ≤ 𝑥 < *	ADP
Red Hat	Network Observability \(NETOBSERV\) 1.11.0	1778508956 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.6	1774243862 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.8	1776784286 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.9	1775140647 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.0	1783502765 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.0	1783502438 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.1	1784194938 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.1	1784194574 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.1	1784126822 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Edge Manager 1.1	1784127736 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 2.16	1774282136 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 3.3	1779189627 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 3.3	1778473763 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 3.3	1778666987 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.14	1778036641 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.15	1777994844 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.16	1774452649 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.17	1774474908 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.19	1776675872 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676191 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783929816 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784094353 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784093953 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784094943 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676585 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676649 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676675 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784094299 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784094725 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676820 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676883 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676894 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784095175 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783676977 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1784093503 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783677297 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783677345 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.18	1783677533 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684360 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684068 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784054582 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784054606 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784055295 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684603 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684668 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684667 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784054873 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684707 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784055589 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684779 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684831 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783684839 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784055533 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784055558 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1784056134 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783685128 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783685129 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.19	1783685375 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667125 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783666755 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784054598 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055387 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055726 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667517 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667577 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667611 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055020 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667641 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055586 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667790 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667859 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667875 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667869 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783667877 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055576 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055244 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1784055382 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783668266 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783668288 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.20	1783669219 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Dev Spaces 3.27	1774448966 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Dev Spaces 3.27	1774476526 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.14	1775512163 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.15	1775169219 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.16	1775069491 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.16	1775169226 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.9	1773936323 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.18	1781247025 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.18	1781181673 ≤ 𝑥 < *	ADP