p PatchFirst

PatchFirst · Latest vulnerabilities

pm2 vulnerabilities

Vulnerabilities published for pm2 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-5891

    Medium · CVSS 5.3EPSS 0.66%Fix available

    Unitech pm2 Config.js redos

    A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

    • Update to 7.0.0
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →