CVE-2025-26042
CVE-2025-26042
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack.
CVSS 6.0 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
uptime-kuma npm
- Affected ranges
- SEMVER: ≥ 1.15.0, ≤ 1.23.16
No fix published
uptime-kuma npm
- Affected ranges
- SEMVER: ≥ 2.0.0-beta.0, < 2.0.0-beta.2
Update to 2.0.0-beta.2