14 matches found
SUSE CVE-2026-97058
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-HP3W-G68C-FV3C Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers
Withdrawn Advisory This advisory has been withdrawn because it is the responsibility of an application to handle exceptions appropriately. This link is maintained to preserve external references. Original Description sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed,...
Improper Validation of Specified Quantity in Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unbounded precision specifiers passed without validation to the toFixed, toExponential, and toPrecision methods. An attacker who controls a format string can inject precision values...
Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers
Withdrawn Advisory This advisory has been withdrawn because it is the responsibility of an application to handle exceptions appropriately. This link is maintained to preserve external references. Original Description sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed,...
AZL-105069 CVE-2026-97058 affecting package js-jquery 3.5.0-4
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
AZL-105254 CVE-2026-97058 affecting package python-tensorboard 2.16.2-6
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
EUVD-2026-85884
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058 sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
CVE-2026-97058
The sprintf-js library, through version 1.1.3 , is vulnerable to a RangeError exception because it passes unbounded precision specifiers to the toFixed , toExponential , and toPrecision methods without sufficient validation. Attackers who can control the format strings can inject precision values...
CVE-2026-97058: Undefined Security Weakness
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
PT-2026-105024
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...