CVE-2025-5896

The CVE-2025-5896 entry concerns taro/taro (up to version 4.1.1). The vulnerability exists in taro/packages/css-to-react-native/src/index.js and arises from inefficient regular-expression handling (ReDoS-like behavior) in that code path. The issue can be triggered remotely and, per sources, upgra...

CVE-2021-3804

CVE-2021-3804 affects taro (NervJS/taro) with an Inefficient Regular Expression Complexity flaw. The vulnerability is reported as high impact (availability). The NVD/NVD-derived data cite network attack vector with low complexity and no authentication/interaction required. Several connected sourc...