Homepage
About Snyk

steal@0.14.0-pre.2 vulnerabilities

Gets JavaScript.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the steal package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Prototype Pollution

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Prototype Pollution via the alias variable in babel.js.

How to fix Prototype Pollution?

There is no fixed version for steal.

*
  • M
Regular Expression Denial of Service (ReDoS)

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regex in the string variable of babel.js.

How to fix Regular Expression Denial of Service (ReDoS)?

There is no fixed version for steal.

*
  • M
Prototype Pollution

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Prototype Pollution via the packageName variable in npm-convert.js.

How to fix Prototype Pollution?

There is no fixed version for steal.

*
  • M
Regular Expression Denial of Service (ReDoS)

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the input variable.

How to fix Regular Expression Denial of Service (ReDoS)?

There is no fixed version for steal.

*
  • M
Regular Expression Denial of Service (ReDoS)

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the source and sourceWithComments variables.

How to fix Regular Expression Denial of Service (ReDoS)?

There is no fixed version for steal.

*
  • H
Prototype Pollution

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Prototype Pollution via the optionName variable.

How to fix Prototype Pollution?

There is no fixed version for steal.

*
  • M
Prototype Pollution

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Prototype Pollution in the function convertLater, via the requestedVersion variable.

How to fix Prototype Pollution?

There is no fixed version for steal.

*
  • M
Prototype Pollution

steal is a Gets JavaScript.

Affected versions of this package are vulnerable to Prototype Pollution in the extend() function, via the key variable.

How to fix Prototype Pollution?

There is no fixed version for steal.

*
Go back to all versions of this package