steal vulnerable to Regular Expression Denial of Service via input variable

Description

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal via the input variable in main.js.

Recommendation

No fix is available yet. Followings are affected versions:

<= 2.3.0

References

Could your website be exposed too?

SmartScanner can check your website for steal vulnerable to Regular Expression Denial of Service via input variable and gives you actionable findings to investigate.

Start a free scan

Related Issues

steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments - CVE-2022-37262
angular vulnerable to regular expression denial of service via the <input type="url"> element - CVE-2023-26118
angular vulnerable to regular expression denial of service via the angular.copy() utility - CVE-2023-26116
cookiejar Regular Expression Denial of Service via Cookie.parse function - CVE-2022-25901

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated September 07, 2023