| शीर्षक | beautifier js-beautify 1.15.1 Denial of Service |
|---|
| विवरण | js-beautify (beautifier) up to 1.15.1 is vulnerable to memory exhaustion via deeply nested indent structures (CWE-789). A 16 KB input with deeply nested brackets causes O(n^2) output growth and real memory exhaustion: measured at 16 KB input producing 3 GB+ RSS, 64 KB input triggering OOM kill. Affects both the npm package and the pip package (jsbeautifier). Used in VS Code and widely across JavaScript and CSS build toolchains. An attacker who can supply input to a beautification pipeline can cause denial of service. CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). |
|---|
| स्रोत | ⚠️ https://github.com/beautifier/js-beautify/issues/2522 |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 15/09/2026 12:13 AM (29 दिन पहले) |
|---|
| संयम | 12/10/2026 01:36 PM (28 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 416885 [beautifier js-beautify तक 1.15.1/2.0.3 सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|