Prototype Pollution

steal is vulnerable to prototype pollution. The optionName variable in main.js is not validated, allowing an attacker to modify object by accessing it through the ‘proto’ property of object...

steal 安全漏洞

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in steal 2.2.4, which originates from a StealJS Regular Expression Denial of Service ReDoS via the optionName variabl...