26 matches found
Astra Linux – Vulnerability in node-es5-ext
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. This vulnerability has been fixed in v0.10.63...
CLSA-2026-1781139201 TuxCare security update for es5-ext (1 CVE)
TuxCare rebuilt es5-ext to address 1 CVE. Fixed in 0.10.46-tuxcare.1...
CLSA-2026-1773793041 TuxCare security update for es5-ext (1 CVE)
TuxCare rebuilt es5-ext to address 1 CVE. Fixed in 0.10.7-tuxcare.1...
PT-2026-74004
TuxCare rebuilt es5-ext to address 1 CVE. Fixed in 0.10.7-tuxcare.1...
PT-2026-75021
TuxCare rebuilt es5-ext to address 1 CVE. Fixed in 0.10.46-tuxcare.1...
Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in medikoo es5-ext
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of medikoo es5-ext. Vulnerability Details CVEID:CVE-2024-27088 DESCRIPTION: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in es5-ext-0.10.53.tgz
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of es5-ext-0.10.53.tgz Vulnerability Details CVEID:CVE-2024-27088 DESCRIPTION: medikoo es5-ext is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By providing...
ROS-20240904-12
A vulnerability in the ECMAScript 5 extension of the es5-ext package is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana for Synthetic PoP build 271 Vulnerability Details CVEID:CVE-2024-22259 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability i...
Security Bulletin: Vulnerabilities in medikoo es5-ext and Node.js packages might affect IBM Storage Defender – Resiliency Service (CVE-2024-27088 and CVE-2024-28849)
Summary IBM Storage Defender – Resiliency Service is vulnerable and that can result in denial of service. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-27088 DESCRIPTION: medikoo es5-ext is vulnerable to a denial of service, caused by a regular expression denial of...
Denial Of Service (DoS)
es5-ext is vulnerable to a Denial of Service DoS. The vulnerability is due to the handling of functions with very long names or complex default argument names in functioncopy or functiontoStringTokens, which may cause the script to stall. This potentially leads to Denial of Service DoS...
@alfresco/adf-testing (6.0.0-A.2-8258), @avnet-iotc/iotc-demo (1.0.0-beta-2) +121 more potentially affected by CVE-2024-27088 via es5-ext (>=0.10.53, <=0.10.62)
es5-ext NPM version =0.10.53, =0.30.77, =0.30.77, =0.29.0, =0.29.0, =0.29.0, =0.30.46, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.30.66 and more Source cves: CVE-2024-27088 Source advisory: GHSA-4GMJ-3P3H-GM8H...
GHSA-4GMJ-3P3H-GM8H es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Impact Passing functions with very long names or complex default argument names into functioncopy orfunctiontoStringTokens may put script to stall Patches Fixed with https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 and...
@alfresco/adf-testing (6.0.0-A.2-8258), @avnet-iotc/iotc-demo (1.0.0-beta-2) +121 more potentially affected by CVE-2024-27088 via es5-ext (>=0.10.53, <=0.10.62)
es5-ext NPM version =0.10.53, =0.30.77, =0.30.77, =0.29.0, =0.29.0, =0.29.0, =0.30.46, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.30.66 and more Source cves: CVE-2024-27088 Source advisory: OSV:GHSA-4GMJ-3P3H-GM8H...
es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Impact Passing functions with very long names or complex default argument names into functioncopy orfunctiontoStringTokens may put script to stall Patches Fixed with https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 and...
CVE-2024-27088
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...
CVE-2024-27088
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...
UBUNTU-CVE-2024-27088
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...
CVE-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...