Skip to main content
cve.nowby Sazabi
← npm
npmPackage

steal

8 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 1 critical, 1 high
Registry
npm

Advisories 8

  • CVE-2022-37265Critical 9.8

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

    Affected: through 2.3.0.

  • A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

    Affected: through 2.3.0.

  • Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in…

    Affected: through 2.3.0.

  • A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.

    Affected: through 2.3.0.

  • Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.

    Affected: through 2.3.0.

  • A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in…

    Affected: through 2.3.0.

  • Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in…

    Affected: through 2.3.0.

  • Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.

    Affected: through 2.3.0.