View all vulnerabilities

CVE-2022-25858

Terser insecure use of regular expressions leads to ReDoS

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
7.5
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Versions
terser < 4.8.1; terser >= 5.0.0 < 5.14.2
Severity
High
Ecosystem
JavaScript
Publish Date
July 15, 2022
Modified Date
January 14, 2025