GHSA-v63q-hgqc-qvpgHighCVSS 7.5

MooTools Regular Expression Denial of Service

Published
January 3, 2023
Last Modified
April 2, 2024

🔗 CVE IDs covered (1)

📋 Description

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. No patches are available for this issue.

🎯 Affected products1

  • npm/mootools:<= 1.5.2

🔗 References (3)