@bitovi/incremental (>=1.0.0, <=1.0.2), @bitovi/velocirender (>=1.0.0, <=1.4.1) +17 more potentially affected by CVE-2022-37259 via steal (2.3.0)

steal NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on steal and may be impacted: - @bitovi/incremental =1.0.0, =1.0.0, =3.0.2-can4, =1.0.0, =1.0.0, =3.0.0-pre.0, =3.0.0-pre.0, =3.0.0-pre.0, =2.0.0, =0.0.1, =2.8.0, =2.12.0 and more...

CVE-2022-37259

creationtimestamp| type| source ---|---|--- 2022-09-20 22:39:43+00:00| seen| https://t.me/cibsecurity/50161...

CVE-2022-37259

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the string variable in babel.js...

CVE-2022-37259

CVE-2022-37259 affects stealjs/steal version 2.2.4. The root cause is a Regular Expression Denial of Service (ReDoS) flaw exposed via a string variable in babel.js. The CVSS metrics indicate Network attack vector, low attack complexity, no privileges or user interaction, with availability impact ...

CVE-2022-37259

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the string variable in babel.js...