Описание
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-es5-ext | fixed | 0.10.64+dfsg1+~1.1.0-1 | package | |
| node-es5-ext | no-dsa | bookworm | package | |
| node-es5-ext | no-dsa | bullseye | package | |
| node-es5-ext | no-dsa | buster | package |
Примечания
https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h
https://github.com/medikoo/es5-ext/issues/201
https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 (v0.10.63)
https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602 (v0.10.63)
EPSS
Связанные уязвимости
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.
es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Уязвимость функций function#copy и function#toStringTokens расширения ECMAScript 5 пакета es5-ext, позволяющая нарушителю вызвать отказ в обслуживании
EPSS