vsociety

CVEs

CVE-2024-21539

7.5 High Severity

xtranslation

Versions of @eslint/plugin-kit before 0.2.3 are vulnerable to a specific Denial of Service called Regular Expression Denial of Service (ReDoS). This happens due to a problem in the input sanitization process, which can lead to increased CPU usage that may crash the application and make it unavailable to the end user. There is already a commit that fixes this in versions >= 2.3.0

@paulo.rubens

1 post

Total vcoins

350

Comments (0)