Skip to content
Sign in
5.3 Medium

CVE-2022-25858 The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service…

Description

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

Affected products and versions

Product Affected versions Fixed in
terser 5.14 earliest → < 5.14.2 5.14.2
terser 5.0 5.0.0 → latest No fix stated
terser 4.8 earliest → < 4.8.1 4.8.1
Track this CVE