~ / search / GHSA-7xrj-f5rp-j55h

GHSA-7xrj-f5rp-j55h

Uncontrolled Resource Consumption in transpile

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23429

Packages

EcosystemPackageAffectedFixed in
npm transpile <= 2.7.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.

References

External links from the advisory. They lead to third-party sites.