Description (CNA)
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / scss-tokenizer | affected 0 before unspecified |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-SCSSTOKENIZER-2339884
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2936782
- https://github.com/sasstools/scss-tokenizer/issues/45
ADP enrichment
No English description supplied.