Terser vulnerabilities
2 vulnerabilities
Known vulnerabilities in Terser products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Html Minifier Terser1 vulnerabilities
- Terser1 vulnerabilities
CVE-2022-25858debiannode-terser+12
EPSS score3.25%
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.CVE-2022-37620chainguardjitsucom-jitsu+8EPSS score1.17%
A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.