7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
12.6%
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into function#copy or function#toStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63.
function#copy
function#toStringTokens
github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2
github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602
github.com/medikoo/es5-ext/issues/201
github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h