Описание
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal via the source and sourceWithComments variable in main.js.
Пакеты
Наименование
steal
npm
Затронутые версииВерсия исправления
<= 2.3.0
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
около 3 лет назад
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js.