1k-tasks (>=2.3.0, <=3.6.1), @alitajs/remove_version (>=0.0.1, <=0.0.2) +409 more potentially affected by CVE-2022-25858 via terser (>=5.0.0, <=5.14.1)

terser NPM version =5.0.0, =2.3.0, =0.0.1, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.7.0-alpha.2, =2.7.0-alpha.1, =2.0.0-alpha.0, =2.8.0-canary.5, =10.0.0-beta.0, =0.1001.0-next.4, =1.6.3, =1.8.24 - @anyt/oro-webpack-config-builder 0.0.1 - @applegamer22/scr-web 1.0.0-alpha.24.3.1 and more Source cves:...

CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

DEBIAN-CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

AZL-44553 CVE-2022-25858 affecting package js-jquery 3.5.0-4

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

AZL-44460 CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

Code injection

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

UBUNTU-CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

CVE-2022-25858

CVE-2022-25858 affects terser: versions 4.8.1 and later (and 5.x from 5.0.0 up to before 5.14.2) are vulnerable to ReDoS due to insecure regex usage during minification. Impact can be a Denial of Service via crafted inputs. Mitigation: upgrade terser to 4.8.1+ or to 5.14.2+ (i.e., the fixed relea...

CVE-2022-25858 Regular Expression Denial of Service (ReDoS)

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

CVE-2022-25858 Regular Expression Denial of Service (ReDoS)

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

terser 安全漏洞

terser is a JavaScript parser, handler, and compressor toolkit for ES6+ from the individual developers of terser. A security vulnerability exists in terser versions prior to 4.8.1, 5.0.0, and 5.14.2, which stems from the insecure use of regular expressions, resulting in vulnerability to a Regular...

PT-2022-17572 · Terser +2 · Terser +2

Name of the Vulnerable Software and Affected Versions: terser versions prior to 4.8.1 terser versions 5.0.0 through 5.14.2 Description: The issue is related to a Denial of Service by Regular Expression ReDoS due to the insecure usage of regular expressions. This can lead to a service disruption...

3nit-utils (>=0.30.0, <=1.0.2), 6ix (0.0.0-canary.0) +1012 more potentially affected by CVE-2022-25858 via terser (>=4.0.0, <=4.8.0)

terser NPM version =4.0.0, =0.30.0, =0.0.0-canary.0, =0.0.1, =1.0.0-alpha.9, =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.10 - @agilejs/cli 1.0.0 and more Source cves: CVE-2022-25858 Source advisory: SNYK:JS-TERSER-2806366...

1k-tasks (>=2.3.0, <=3.6.1), @alitajs/remove_version (>=0.0.1, <=0.0.2) +409 more potentially affected by CVE-2022-25858 via terser (>=5.0.0, <=5.14.1)

terser NPM version =5.0.0, =2.3.0, =0.0.1, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.7.0-alpha.2, =2.7.0-alpha.1, =2.0.0-alpha.0, =2.8.0-canary.5, =10.0.0-beta.0, =0.1001.0-next.4, =1.6.3, =1.8.24 - @anyt/oro-webpack-config-builder 0.0.1 - @applegamer22/scr-web 1.0.0-alpha.24.3.1 and more Source cves:...