steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
- Severity:
- High
Description
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal via the source and sourceWithComments variable in main.js.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2.3.0
References
Related Issues
- Making all attributes on a content-type public without noticing it (GHSA-chmr-rg2f-9jmf) 2 - CVE-2023-34093
- steal Inefficient Regular Expression Complexity vulnerability via string variable - CVE-2022-37259
- steal vulnerable to Prototype Pollution via alias variable - CVE-2022-37265
- steal vulnerable to Prototype Pollution - CVE-2022-37258
- Tags:
- npm
- steal
Anything's wrong? Let us know Last updated on August 17, 2023