Description
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | steal | <= 2.3.0 | — | GHSA-rgqx-226f-2xp4 |
High · 7.5
CVE-2022-37259
EUVD-2022-6935GHSA-rgqx-226f-2xp4
steal Inefficient Regular Expression Complexity vulnerability via string variable
Published Sep 20, 2022 · Updated May 28, 2025 · Assigned by mitre