Skip to main content

Inefficient Regular Expression Complexity

CVE-2024-27088

Medium
5.5/10

Summary

The es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into "function#copy" or "function#toStringTokens" may cause the script to stall. This issue affects es5-ext versions 0.10.0 through 0.10.62.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-1333 - Inefficient Regular Expression Complexity

The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

References

Advisory Timeline

  • Published