Unrated
Regular Expression Denial of Service (ReDoS)
CVE-2022-25858
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-25858 node-terser
- Ubuntu UBUNTU-CVE-2022-25858 node-terser
Original description The description as published by the source.
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- advisory snyk.io
- advisory snyk.io
- patch github.com
- patch github.com
- web github.com