22 matches found
CLSA-2026-1792700837 TuxCare security update for sprintf-js (1 CVE)
TuxCare rebuilt sprintf-js to address 1 CVE. Fixed in 1.0.3-tuxcare.2...
PT-2026-135232
TuxCare rebuilt sprintf-js to address 1 CVE. Fixed in 1.0.3-tuxcare.2...
SUSE CVE-2026-97058
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Linux Distros Unpatched Vulnerability : CVE-2026-97058
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeErro...
Improper Validation of Specified Quantity in Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unbounded precision specifiers passed without validation to the toFixed, toExponential, and toPrecision methods. An attacker who controls a format string can inject precision values...
GHSA-HP3W-G68C-FV3C Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers
Withdrawn Advisory This advisory has been withdrawn because it is the responsibility of an application to handle exceptions appropriately. This link is maintained to preserve external references. Original Description sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed,...
Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers
Withdrawn Advisory This advisory has been withdrawn because it is the responsibility of an application to handle exceptions appropriately. This link is maintained to preserve external references. Original Description sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed,...
CVE-2026-97058
A flaw was found in sprintf-js. A remote attacker, by controlling format strings, can inject precision values that exceed ECMAScript limits. This lack of validation leads to uncaught RangeError exceptions, allowing the attacker to abort calling operations with a minimal payload, resulting in a...
AZL-105069 CVE-2026-97058 affecting package js-jquery 3.5.0-4
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
AZL-105254 CVE-2026-97058 affecting package python-tensorboard 2.16.2-6
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2026-97058
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
EUVD-2026-85884
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
...
CVE-2026-97058 sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
The sprintf-js library, through version 1.1.3 , is vulnerable to a RangeError exception because it passes unbounded precision specifiers to the toFixed , toExponential , and toPrecision methods without sufficient validation. Attackers who can control the format strings can inject precision values...
PT-2026-105039
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
