~ / search / GHSA-rgqx-226f-2xp4

GHSA-rgqx-226f-2xp4

steal Inefficient Regular Expression Complexity vulnerability via string variable

Source: GitHub Advisory Database (reviewed) High CVE-2022-37259

Packages

EcosystemPackageAffectedFixed in
npm steal <= 2.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

References

External links from the advisory. They lead to third-party sites.