Vulnerability DatabaseCVE-2024-27088
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2024-27088
February 26, 2024
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into "function#copy" or "function#toStringTokens" may cause the script to stall. The vulnerability is patched in v0.10.63.
Additional Notes
The description of this vulnerability differs from MITRE.
Related Resources (6)
https://github.com/medikoo/es5-ext/issues/201
https://nvd.nist.gov/vuln/detail/CVE-2024-27088
https://github.com/medikoo/es5-ext
https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2
https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h
https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602
Do you need more information?
Contact Us
Weakness Type (CWE)
Inefficient Regular Expression Complexity
CWE-1333
Uncontrolled Resource Consumption
CWE-400
EPSS
Base Score:
1.85