Asymmetric denial of service - ReDoS In scss-tokenizer
Description
Regular expression denial of service in scss-tokenizer
All versions of the package scss-tokenizer prior to 0.4.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 0.4.3 | ||
 rpm rhel8 | - | - | |
rpm rhel8 | - | - |
Aliases
1. 2. 3. 4.
References
1. 2. 3.