{"action":"Upgrade es5-ext to 0.10.63 or later.","affected":[{"fixed":"0.10.63","introduced":"0.10.0"}],"component":"es5-ext","cve_ids":["CVE-2024-27088"],"ecosystem":"npm","epss":0.00535,"exploited":false,"fixed_versions":["0.10.63"],"ghsa_id":"GHSA-4gmj-3p3h-gm8h","id":"tcs_01M5KF0DFK2D1W9AXGJEPXT7QJ","modified_at":"2026-09-10T03:50:05.256193314Z","published_at":"2024-02-26T20:01:28Z","references":["https://osv.dev/vulnerability/GHSA-4gmj-3p3h-gm8h","https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h","https://nvd.nist.gov/vuln/detail/CVE-2024-27088","https://github.com/medikoo/es5-ext/issues/201","https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2","https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602","https://github.com/medikoo/es5-ext"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-4gmj-3p3h-gm8h","url":"https://osv.dev/vulnerability/GHSA-4gmj-3p3h-gm8h"}],"summary":"es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`"}