Description
The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | riot-compiler node module | 2.3.21 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | riot-compiler | < 2.3.22 | 2.3.22 | GHSA-pp4v-55vr-9gxh |