npm/es5-ext CVE-2024-27088: low, EPSS 0.53%
es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Action: Upgrade es5-ext to 0.10.63 or later.
npm i es5-ext@0.10.63Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 0.10.63 | - |
Fixed versions
| 0.10.63 |
Sources
- osv: GHSA-4gmj-3p3h-gm8h
- https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h
- https://nvd.nist.gov/vuln/detail/CVE-2024-27088
- https://github.com/medikoo/es5-ext/issues/201
- https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2
- https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602
- https://github.com/medikoo/es5-ext
CVE-2024-27088 · published · modified · JSON