← Database

CVE-2022-25858

MEDIUM CVSS: 5.3 Published: 2022-07-15 Modified: 2026-06-17

Description

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

Affected Platforms

Terser Terser

Weakness Type

CWE-1333

References