Skip to content
OpenAdvisories

Package · npm

steal

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.8
    CVE-2022-37265

    steal vulnerable to Prototype Pollution via alias variable

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

    steal npm
  • High 7.5
    CVE-2022-37259

    steal Inefficient Regular Expression Complexity vulnerability via string variable

    A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

    steal npm
  • Critical 9.8
    CVE-2022-37258

    steal vulnerable to Prototype Pollution

    Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.

    steal npm
  • High 7.5
    CVE-2022-37260

    steal vulnerable to Regular Expression Denial of Service via input variable

    A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.

    steal npm
  • Critical 9.8
    CVE-2022-37264

    steal vulnerable to Prototype Pollution via optionName variable

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.

    steal npm
  • High 7.5
    CVE-2022-37262

    steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

    A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js.

    steal npm
  • Critical 9.8
    CVE-2022-37257

    steal vulnerable to Prototype Pollution via requestedVersion variable

    Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.

    steal npm
  • Critical 9.8
    CVE-2022-37266

    steal vulnerable to Prototype Pollution via key variable in babel.js

    Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.

    steal npm