/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-21539

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-21539

CGA ID

CGA-v55f-9838-wrpj

Severity

Unknown

Description

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability.

References

  • https://images.chainguard.dev/security/CGA-v55f-9838-wrpj

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs