Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-26042
6
MEDIUMCVSS v3
Published
March 17, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack.
louislam/uptime-kuma
GitHubA fancy self-hosted monitoring tool
GitHubA fancy self-hosted monitoring tool>= 1.15.0, <= 1.23.16, >= 2.0.0-beta.0, < 2.0.0-beta.2NVD
uptime-kuma
NPM<div align="center" width="100%"> <img src="./public/icon.svg" width="128" alt="" /> </div>
NPM<div align="center" width="100%"> <img src="./public/icon.svg" width="128" alt="" /> </div>>= 1.15.0, <= 1.23.16, >= 2.0.0-beta.0, < 2.0.0-beta.2OSV