You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Low severity
GitHub Reviewed
Published
Feb 26, 2024
in
medikoo/es5-ext
•
Updated Feb 26, 2024
Impact
Passing functions with very long names or complex default argument names into
function#copy
orfunction#toStringTokens
may put script to stallPatches
Fixed with medikoo/es5-ext@3551cdd and medikoo/es5-ext@a52e957
Published with v0.10.63
Workarounds
No real workaround aside of refraining from using above utilities.
References
medikoo/es5-ext#201
References