Vendor

riot.js vulnerabilities

1 published CVE affecting riot.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Atom feed of riot.js alerts

Products

riot-compiler 1

Latest riot.js CVEs

Newest publication first

CVE-2016-10527 Regular Expression Denial of Service in riot-compiler
Published 2018-05-31

HighCVSS 7.5 EPSS 1.5%

The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.