Skip to content

Product

npm source-map-js vulnerabilities

1 published CVE affecting npm source-map-js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm source-map-js CVEs

Newest publication first

  1. CVE-2026-93749 source-map-js through 1.2.1 Event Loop Denial of Service

    Published
    HighCVSS 8.7 EPSS 0.46%

    source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.