npm/uglify-js CVE-2015-8858: high 7.5, EPSS 2.36%

Regular Expression Denial of Service in uglify-js

Action: Upgrade uglify-js to 2.6.0 or later.

npm i uglify-js@2.6.0

Affected

Fixed versions

Sources

• osv: GHSA-c9f4-xj24-8jqx
• https://nvd.nist.gov/vuln/detail/CVE-2015-8858
• https://github.com/advisories/GHSA-c9f4-xj24-8jqx
• https://www.npmjs.com/advisories/48
• http://www.openwall.com/lists/oss-security/2016/04/20/11
• http://www.securityfocus.com/bid/96409

CVE-2015-8858 · published 2017-10-24T18:33:36Z · modified 2023-11-08T03:58:03.623951Z · JSON