GHSA-7xrj-f5rp-j55hMediumCVSS 6.5

Uncontrolled Resource Consumption in transpile

Published
September 2, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

📋 Description

All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.

🎯 Affected products1

  • npm/transpile:<= 2.7.2

🔗 References (4)