3 matches found
UBUNTU-CVE-2026-97058
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...
6.9CVSS5.9AI score0.00398EPSS
SaveExploits0References2
20