CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

CVE-2025-26042

Uptime Kuma versions >== 1.23.0 are vulnerable to a Regular Expression Denial of Service (ReDoS) via catastrophic backtracking. The issue occurs when an administrator creates a notification through the web service, specifically within the pushdeer.js and whapi.js notification providers. The vu...