steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

Description

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal via the source and sourceWithComments variable in main.js.

Recommendation

No fix is available yet. Followings are affected versions:

<= 2.3.0

References

Could your website be exposed too?

SmartScanner can check your website for steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments and gives you actionable findings to investigate.

Start a free scan

Related Issues

steal vulnerable to Regular Expression Denial of Service via input variable - CVE-2022-37260
angular vulnerable to regular expression denial of service via the <input type="url"> element - CVE-2023-26118
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards - CVE-2026-4923
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters - CVE-2026-4867

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated August 17, 2023