EUVD-2022-6234

Malicious code in bioql PyPI...

0303-lb3-paket (=1.0.1), 1uphealth-provider-search (>=0.1.0 <=0.3.0) +6665 more potentially affected by CVE-2022-25858 via terser (>=3.10.0 <=4.8.0)

terser NPM version =3.10.0, =0.1.0, =0.1.0, =1.0.1, =0.24.0, =1.1.12, =0.1.4, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =1.0.0, =3.0.0, =3.0.15 and more Source cves: CVE-2022-25858 Source advisory: OSV:GHSA-4WF5-VPHF-C2XC...

@angular-devkit/build-angular (>=0.1001.0-next.4 <=14.1.0-rc.3), @bkstorm/vendure-ui-devkit (=2.0.0-next.5-beta.1) +71 more potentially affected by CVE-2022-25858 via terser (>=5.0.0 <=5.14.1)

terser NPM version =5.0.0, =0.1001.0-next.4, =1.4.5, =13.0.2, =3.9.0, =0.1.1, =0.1.1, =0.1.22, =0.1.22, =0.1.32, =0.1.1, =0.1.0, =1.7.4, =1.7.18 and more Source cves: CVE-2022-25858 Source advisory: OSV:GHSA-4WF5-VPHF-C2XC...

AZL-44553 CVE-2022-25858 affecting package js-jquery 3.5.0-4

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

UBUNTU-CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

3nit-utils (>=0.30.0 <=1.0.2), 6ix (=0.0.0-canary.0) +1010 more potentially affected by CVE-2022-25858 via terser (>=4.0.0 <=4.8.0)

terser NPM version =4.0.0, =0.30.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.10 - @agilejs/cli =1.0.0 and more Source cves: CVE-2022-25858 Source advisory: SNYK:JS-TERSER-2806366...

@angular-devkit/build-angular (>=0.1001.0-next.4 <=14.1.0-rc.3), @bkstorm/vendure-ui-devkit (=2.0.0-next.5-beta.1) +71 more potentially affected by CVE-2022-25858 via terser (>=5.0.0 <=5.14.1)

terser NPM version =5.0.0, =0.1001.0-next.4, =1.4.5, =13.0.2, =3.9.0, =0.1.1, =0.1.1, =0.1.22, =0.1.22, =0.1.32, =0.1.1, =0.1.0, =1.7.4, =1.7.18 and more Source cves: CVE-2022-25858 Source advisory: SNYK:JS-TERSER-2806366...