GHSA-vqpr-j7v3-hqw9Published
Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-66020 · Microsoft / collected KEV context
cve-program · CVE-2025-66020
- https://github.com/open-circle/valibot/security/advisories/GHSA-vqpr-j7v3-hqw9
- https://github.com/open-circle/valibot/commit/cfb799db301a953a0950d5c05a34a3ab121262dc
nvd · CVE-2025-66020
- https://github.com/open-circle/valibot/commit/cfb799db301a953a0950d5c05a34a3ab121262dc
- https://github.com/open-circle/valibot/security/advisories/GHSA-vqpr-j7v3-hqw9
osv · GHSA-vqpr-j7v3-hqw9
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.