Skip to content
OpenAdvisories

Package · npm

acorn

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-6chw-6frg-f759

    Regular Expression Denial of Service in Acorn

    Affected versions of acorn are vulnerable to Regular Expression Denial of Service. A regex in the form of /[x-\ud800]/u causes the parser to enter an infinite loop. The string is not valid UTF16 which usually results in it being sanitized before reaching the …

    acorn npm