CVE-2025-26042
1 advisory.
npm/uptime-kuma CVE-2025-26042: medium, EPSS 0.40%
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Action: Upgrade uptime-kuma to 2.0.0-beta.2 or later.
npm i uptime-kuma@2.0.0-beta.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.15.0 | - | 1.23.16 |
| 2.0.0-beta.0 | 2.0.0-beta.2 | - |
Fixed versions
| 2.0.0-beta.2 |
Sources
- osv: GHSA-hx7h-9vf7-5xhg
- https://github.com/louislam/uptime-kuma/security/advisories/GHSA-hx7h-9vf7-5xhg
- https://nvd.nist.gov/vuln/detail/CVE-2025-26042
- https://github.com/louislam/uptime-kuma/issues/5574
- https://github.com/louislam/uptime-kuma/pull/5573
- https://github.com/louislam/uptime-kuma/commit/7a9191761dbef6551c2a0aa6eed5f693ba48d688
- https://gist.github.com/ShiyuBanzhou/26c918f93b07f5ce90e8f7000d29c7a0
- https://gist.github.com/ShiyuBanzhou/bf4cee61603e152c114fa8c4791f9f28
- https://github.com/louislam/uptime-kuma
CVE-2025-26042 · published · modified · JSON