steal Inefficient Regular Expression Complexity vulnerability via string variable
- Severity:
- High
Description
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2.3.0
References
Related Issues
- Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components - CVE-2025-1647
- Matrix JavaScript SDK's key history sharing could share keys to malicious devices - CVE-2024-47080
- Sending a GET or HEAD request with a body crashes SvelteKit (GHSA-g5m6-hxpp-fc49) - CVE-2024-23641
- msgpackr's conversion of property names to strings can trigger infinite recursion - CVE-2023-52079
- Tags:
- npm
- steal
Anything's wrong? Let us know Last updated on August 17, 2023