5.3 Medium

CVE-2025-7074 A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1

Description

A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1. This affects the function expand/braceExpand/ignoreMap of the file hyper/bin/rimraf-standalone.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product	Affected versions	Fixed in
hyper 3.4	3.4.0 → 3.4.1	No fix stated

References

VDB-314973 | vercel hyper rimraf-standalone.js ignoreMap redos vuldb.com
VDB-314973 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #602353 | vercel hyper >=18.2.79 Inefficient Regular Expression Complexity vuldb.com
github.com github.com

Timeline

Published July 5, 2025
Last modified July 7, 2025

Track this CVE