{"action":"Upgrade uptime-kuma to 2.0.0-beta.2 or later.","affected":[{"introduced":"1.15.0","last_affected":"1.23.16"},{"fixed":"2.0.0-beta.2","introduced":"2.0.0-beta.0"}],"component":"uptime-kuma","cve_ids":["CVE-2025-26042"],"ecosystem":"npm","epss":0.00397,"exploited":false,"fixed_versions":["2.0.0-beta.2"],"ghsa_id":"GHSA-hx7h-9vf7-5xhg","id":"tcs_01M5KFWDBPBBT1B68FZG8SN5ZT","modified_at":"2025-08-07T14:42:07.036045Z","published_at":"2025-03-31T16:12:53Z","references":["https://osv.dev/vulnerability/GHSA-hx7h-9vf7-5xhg","https://github.com/louislam/uptime-kuma/security/advisories/GHSA-hx7h-9vf7-5xhg","https://nvd.nist.gov/vuln/detail/CVE-2025-26042","https://github.com/louislam/uptime-kuma/issues/5574","https://github.com/louislam/uptime-kuma/pull/5573","https://github.com/louislam/uptime-kuma/commit/7a9191761dbef6551c2a0aa6eed5f693ba48d688","https://gist.github.com/ShiyuBanzhou/26c918f93b07f5ce90e8f7000d29c7a0","https://gist.github.com/ShiyuBanzhou/bf4cee61603e152c114fa8c4791f9f28","https://github.com/louislam/uptime-kuma"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-hx7h-9vf7-5xhg","url":"https://osv.dev/vulnerability/GHSA-hx7h-9vf7-5xhg"},{"source":"nvd","source_id":"CVE-2025-26042","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26042"}],"summary":"Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking"}