CVE-2022-22138: 
JavaScript vulnerability analysis and mitigation

CVE-2022-22138 is a vulnerability affecting the fast-string-search npm package, discovered and disclosed on February 3, 2022. This vulnerability impacts all versions of the package, which is a module designed to search substrings in a string using N-API and boyer-moore-magiclen (Snyk).

The vulnerability is classified as a Denial of Service (DoS) issue with a CVSS v3.1 score of 7.5 (High). The vulnerability occurs when computations are incorrect for non-string inputs, which can cause V8 to attempt reading from non-permitted locations and result in a segmentation fault. The attack vector is network-based, with low attack complexity, requiring no privileges or user interaction, and the scope is unchanged (Snyk).

When exploited, this vulnerability can lead to a total loss of availability, resulting in the attacker being able to fully deny access to resources in the impacted component. The loss can be either sustained while the attack continues or persistent even after the attack has completed. While there is no loss of confidentiality or integrity, the availability impact is rated as High (Snyk).

Currently, there is no fixed version available for the fast-string-search package (Snyk).