{"action":"Upgrade pm2 to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"0"}],"component":"pm2","cve_ids":["CVE-2025-5891"],"ecosystem":"npm","epss":0.00698,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-x5gf-qvw8-r2rm","id":"tcs_01M5KGH11SMKD1Q57NPNHEDEGP","modified_at":"2026-06-02T05:15:10.006857147Z","published_at":"2025-06-09T21:30:51Z","references":["https://osv.dev/vulnerability/GHSA-x5gf-qvw8-r2rm","https://nvd.nist.gov/vuln/detail/CVE-2025-5891","https://github.com/Unitech/pm2/issues/6075","https://github.com/Unitech/pm2/pull/5971","https://github.com/Unitech/pm2/commit/8b9354800a1d157cb9503a3ec414ef1e4700dc1c","https://gist.github.com/mmmsssttt404/407e2ffe3e0eaa393ad923a86316a385","https://github.com/Unitech/pm2","https://github.com/Unitech/pm2/blob/ba62cae9b9b7116ee758b70f538919a52515fa26/CHANGELOG.md?plain=1#L36","https://github.com/Unitech/pm2/releases/tag/v7.0.0","https://vuldb.com/?ctiid.311662","https://vuldb.com/?id.311662","https://vuldb.com/?submit.585750"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x5gf-qvw8-r2rm","url":"https://osv.dev/vulnerability/GHSA-x5gf-qvw8-r2rm"}],"summary":"pm2 Regular Expression Denial of Service vulnerability"}