Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-25758

Regular Expression Denial of Service (ReDoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a scss-tokenizer

  • 0 to < unspecifiedaffected

References