GitHub Advisoryadvisory · npm

GHSA-7xrj-f5rp-j55h Uncontrolled Resource Consumption in transpile

MEDIUM Published 2021-09-02 Modified 2021-08-25 Official page ↗
Aliases
CVE-2021-23429
Ecosystem
npm
Packages
transpile
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-755
Reviewed
2021-08-25

Affected packages

• npm transpile: <= 2.7.2 (no fix yet)

Description

All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.

Related

Alias · CVE (1)

  • CVE-2021-23429 All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled… vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness

References