CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

PT-2026-95589

Name of the Vulnerable Software and Affected Versions source-map-js versions 1.2.1 and earlier Description The software fails to validate the per-section offset line value in indexed source maps. An attacker can provide arbitrary and extremely large numeric values for these offsets, which leads t...