Read the docs

Taro

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Taro records in CISA KEV

No Taro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2025-05322 CVE-2025-5896 · GHSA-f5xg-cfpj-2mw6

tarojs taro index.js redos

Priority MEDIUM 57

A vulnerability was found in tarojs taro up to 4.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00661 Published 2025-06-09 Fixed in 4.1.2 CWE-1333
Open these records in search →