You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: /fixtures/packaging/systemjs-builder/dev/package.json
Path to vulnerable library: /fixtures/packaging/systemjs-builder/dev/package.json,/fixtures/packaging/systemjs-builder/prod/package.json,/fixtures/expiration/package.json
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into function#copy or function#toStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63.
CVE-2024-27088 - Low Severity Vulnerability
es5-ext-0.10.15.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.15.tgz
Path to dependency file: /fixtures/ssr/package.json
Path to vulnerable library: /fixtures/ssr/package.json
Dependency Hierarchy:
es5-ext-0.10.12.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.12.tgz
Path to dependency file: /fixtures/fiber-debugger/package.json
Path to vulnerable library: /fixtures/fiber-debugger/node_modules/es5-ext/package.json,/fixtures/dom/package.json
Dependency Hierarchy:
es5-ext-0.10.35.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.35.tgz
Path to dependency file: /fixtures/packaging/systemjs-builder/dev/package.json
Path to vulnerable library: /fixtures/packaging/systemjs-builder/dev/package.json,/fixtures/packaging/systemjs-builder/prod/package.json,/fixtures/expiration/package.json
Dependency Hierarchy:
es5-ext-0.10.52.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.52.tgz
Path to dependency file: /fixtures/flight/package.json
Path to vulnerable library: /fixtures/flight/package.json
Dependency Hierarchy:
es5-ext-0.10.37.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.37.tgz
Path to dependency file: /fixtures/concurrent/time-slicing/package.json
Path to vulnerable library: /fixtures/concurrent/time-slicing/package.json
Dependency Hierarchy:
es5-ext-0.10.29.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.29.tgz
Path to dependency file: /fixtures/attribute-behavior/package.json
Path to vulnerable library: /fixtures/attribute-behavior/package.json
Dependency Hierarchy:
es5-ext-0.10.53.tgz
ECMAScript extensions and shims
Library home page: https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.53.tgz
Path to dependency file: /fixtures/blocks/package.json
Path to vulnerable library: /fixtures/blocks/package.json
Dependency Hierarchy:
Found in HEAD commit: 4669645897ed4ebcd4ee037f4dabb509ed4754c7
Found in base branch: master
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into
function#copy
orfunction#toStringTokens
may cause the script to stall. The vulnerability is patched in v0.10.63.Publish Date: 2024-02-26
URL: CVE-2024-27088
Base Score Metrics:
Type: Upgrade version
Origin: https://www.cve.org/CVERecord?id=CVE-2024-27088
Release Date: 2024-02-26
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (react-scripts): 1.0.0
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (react-scripts): 1.0.0
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (systemjs-builder): 0.16.0
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (resolve-url-loader): 3.1.1
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (react-scripts): 1.1.5
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (react-scripts): 1.0.12
Fix Resolution (es5-ext): 0.10.63
Direct dependency fix Resolution (react-scripts): 3.4.2
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: