Read the docs

Terser

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Terser records in CISA KEV

No Terser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority LOW 39

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03253 Published 2022-07-15 Partial fix · 4.8.1, 5.14.2 CWE-1333
Open these records in search →