← Database

CVE-2022-25758

MEDIUM CVSS: 5.3 Published: 2022-07-01 Modified: 2026-06-17

Description

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

Affected Platforms

Scss-Tokenizer Project Scss-Tokenizer

Weakness Type

CWE-1333

References