5.3 Medium

CVE-2022-25758 All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the…

Description

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

Affected products and versions

Product	Affected versions	Fixed in
scss-tokenizer	Versions not published

Do you use scss-tokenizer?

Track this CVE Watch scss-tokenizer Check my SBOMs

www.cveye.io/en/cve/CVE-2022-25758

Timeline

Published July 1, 2022
Last modified September 17, 2024

References

snyk.io snyk.io
snyk.io snyk.io
github.com github.com

Track this CVE