docs.hackerone.com icon indicating copy to clipboard operation
docs.hackerone.com copied to clipboard

Published 20 hours ago • verified publisher icon Hacker0x01

Terser insecure use of regular expressions before v4.8.1 and v5.14.2 leads to ReDoS

Open imhunterand opened this issue 2 years ago • 0 comments

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

upgrade terser to version 5.14.2 or later. For example:

terser@^5.14.2:
  version "5.14.2"

imhunterand avatar Jul 30 '22 19:07 imhunterand