CVE-2026-93749
1 advisory.
npm/source-map-js CVE-2026-93749: high 7.5
source-map-js allows event-loop denial of service through indexed source-map section offsets
Action: Upgrade source-map-js to 1.2.2 or later.
npm i source-map-js@1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GHSA-68fv-2mgg-jv7q
- https://nvd.nist.gov/vuln/detail/CVE-2026-93749
- https://github.com/7rulnik/source-map-js/issues/76
- https://github.com/7rulnik/source-map-js/pull/79
- https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016
- https://github.com/7rulnik/source-map-js
- https://github.com/7rulnik/source-map-js/blob/c1cd8904bb7bd0c7fb5879fcda48134d82a27934/lib/source-node.js#L115-L118
- https://github.com/7rulnik/source-map-js/releases/tag/v1.2.2
- https://www.vulncheck.com/advisories/source-map-js-through-1.2.1-event-loop-denial-of-service
CVE-2026-93749 · published · modified · JSON