CVE-2024-27088

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-27088

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27088.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2024-27088

Aliases

GHSA-4gmj-3p3h-gm8h

Related

UBUNTU-CVE-2024-27088

Published

2024-02-26T17:15:11Z

Modified

2024-10-12T11:20:18.805789Z

Summary

[none]

Details

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into function#copy or function#toStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63.

References

Affected packages

Debian:11 / node-es5-ext

Package

Name: node-es5-ext
Purl: pkg:deb/debian/node-es5-ext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.53+~1.1.0-1

0.10.53+~1.1.0-2

0.10.57+dfsg1+~1.1.0-1

0.10.61+dfsg1+~1.1.0-1

0.10.62+dfsg1+~1.1.0-1

0.10.62+dfsg1+~1.1.0-2

0.10.64+dfsg1+~1.1.0-1

0.10.64+dfsg1+~1.1.0-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / node-es5-ext

Package

Name: node-es5-ext
Purl: pkg:deb/debian/node-es5-ext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.62+dfsg1+~1.1.0-2

0.10.64+dfsg1+~1.1.0-1

0.10.64+dfsg1+~1.1.0-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / node-es5-ext

Package

Name: node-es5-ext
Purl: pkg:deb/debian/node-es5-ext?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.10.64+dfsg1+~1.1.0-1

Affected versions

0.*

0.10.62+dfsg1+~1.1.0-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/medikoo/es5-ext

Affected ranges

Type: GIT
Repo: https://github.com/medikoo/es5-ext
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3551cdd7b2db08b1632841f819d008757d28e8e2

Fixed

a52e95736690ad1d465ebcd9791d54570e294602

Affected versions

v0.*

v0.1.0

v0.10.0

v0.10.1

v0.10.10

v0.10.11

v0.10.12

v0.10.13

v0.10.14

v0.10.15

v0.10.16

v0.10.17

v0.10.18

v0.10.19

v0.10.2

v0.10.20

v0.10.21

v0.10.22

v0.10.23

v0.10.24

v0.10.25

v0.10.26

v0.10.27

v0.10.28

v0.10.29

v0.10.3

v0.10.30

v0.10.31

v0.10.32

v0.10.33

v0.10.34

v0.10.35

v0.10.36

v0.10.37

v0.10.38

v0.10.39

v0.10.4

v0.10.40

v0.10.41

v0.10.42

v0.10.43

v0.10.44

v0.10.45

v0.10.46

v0.10.47

v0.10.48

v0.10.49

v0.10.5

v0.10.50

v0.10.51

v0.10.52

v0.10.53

v0.10.54

v0.10.55

v0.10.56

v0.10.57

v0.10.58

v0.10.59

v0.10.6

v0.10.60

v0.10.61

v0.10.62

v0.10.7

v0.10.8

v0.10.9

v0.2.0

v0.2.1

v0.3.0

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.7.0

v0.7.1

v0.8.0

v0.8.1

v0.8.2

v0.9.0

v0.9.1

v0.9.2