Approved changes feed: RSS · Atom

cpe:2.3:a:terser:terser:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorTerser (645e95f1-5cde-5424-8511-e65ac791f4b0)
ProductTerser (b69b7768-9b84-5880-8968-570fba4653e7)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25858 vulnerable 2026-06-08 05:41:49.578548 Regular Expression Denial of Service (ReDoS)
MEDIUM (5.3)
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.
Published: 2022-07-15T20:00:19.590Z
Updated: 2024-09-16T19:45:47.956Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.