medium6.5
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exceptio…
Impact
All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Transpile Project | Transpile | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53
- https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774
- https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53
- https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774