Loading HuntDB...

GHSA-pp4v-55vr-9gxh

GitHub Security Advisory

Regular Expression Denial of Service in riot-compiler

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

Affected versions of `riot-compiler` are susceptible to a regular expression denial of service vulnerability.

## Recommendation

Update to version 2.3.22 or later.

Affected Packages

npm riot-compiler
Affected versions: 0 (fixed in 2.3.22)

Related CVEs

Key Information

GHSA ID
GHSA-pp4v-55vr-9gxh
Published
February 18, 2019 11:39 PM
Last Modified
September 12, 2023 6:42 PM
CVSS Score
7.5 /10
Primary Ecosystem
npm
Primary Package
riot-compiler
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.