CVE-2022-37259 | Severity.io

Description

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

Related CPE's

Vulnerable

References

Third Party Advisory

Third Party Advisory

Issue TrackingThird Party Advisory

Third Party Advisory

Third Party Advisory

Issue TrackingThird Party Advisory

Weaknesses

Primary

CWE-1333

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-1333

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 · High

Information

Source identifier

Vulnerability status

Modified

Published

2022-09-20T16:15:10.227Z

3 years ago

Last modified

2025-05-28T17:15:30.310Z

9 months ago