CVE-2025-5891
1 advisory.
npm/pm2 CVE-2025-5891: medium 4.3, EPSS 0.66%
pm2 Regular Expression Denial of Service vulnerability
Action: Upgrade pm2 to 7.0.0 or later.
npm i pm2@7.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.0 | - |
Fixed versions
| 7.0.0 |
Sources
- osv: GHSA-x5gf-qvw8-r2rm
- https://nvd.nist.gov/vuln/detail/CVE-2025-5891
- https://github.com/Unitech/pm2/issues/6075
- https://github.com/Unitech/pm2/pull/5971
- https://github.com/Unitech/pm2/commit/8b9354800a1d157cb9503a3ec414ef1e4700dc1c
- https://gist.github.com/mmmsssttt404/407e2ffe3e0eaa393ad923a86316a385
- https://github.com/Unitech/pm2
- https://github.com/Unitech/pm2/blob/ba62cae9b9b7116ee758b70f538919a52515fa26/CHANGELOG.md?plain=1#L36
- https://github.com/Unitech/pm2/releases/tag/v7.0.0
- https://vuldb.com/?ctiid.311662
- https://vuldb.com/?id.311662
- https://vuldb.com/?submit.585750
CVE-2025-5891 · published · modified · JSON