Description
All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2.7.2
References
Could your website be exposed too?
SmartScanner can check your website for Uncontrolled Resource Consumption in transpile and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Uncontrolled Resource Consumption in trim-newlines - CVE-2021-33623
- Uncontrolled Resource Consumption in trim-off-newlines - CVE-2021-23425
- Uncontrolled Resource Consumption in ansi-html - CVE-2021-23424
- Uncontrolled Resource Consumption in fun-map - CVE-2020-7644
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023


