CyberSecBulletin

Open-circle vulnerabilities

We track 1 vulnerability in Open-circle products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 26, 2025.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Open-circle vulnerabilities

  • 7.5 High severity

    valibot: Inefficient Regular Expression Complexity

    CVE-2025-66020Open-circle

    Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_REGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. A short, maliciously crafted string (e.g., <100 characters) can cause