All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.
References
Link | Resource |
---|---|
https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53 | Broken Link |
https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: snyk
Published: 2021-08-24T00:00:00
Updated: 2021-08-24T07:45:30
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23429
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-08-24T08:15:21.543
Modified: 2021-08-31T01:41:55.773
Link: CVE-2021-23429
JSON object: View
Redhat Information
No data.
CWE