CVE-2022-25858
15.07.2022, 20:15
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| terser | terser | 𝑥 < 4.8.1 |
| terser | terser | 5.0.0 ≤ 𝑥 < 5.14.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||||||||||
| node-terser |
| ||||||||||||||||||||
| qt6-webengine |
|
Common Weakness Enumeration
References