CVE-2022-25858: Terser

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

Affected products

• Terser Terser: before 4.8.1 (fixed in 4.8.1); from 5.0.0, before 5.14.2 (fixed in 5.14.2)

Published 2022-07-15. Last modified 2026-06-17.