Description
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | steal | <= 2.3.0 | — | GHSA-7f3x-2wcx-hww8 |
High · 7.5
CVE-2022-37260
EUVD-2022-6731GHSA-7f3x-2wcx-hww8
steal vulnerable to Regular Expression Denial of Service via input variable
Published Sep 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre