CyberRota Analysis
AI-GeneratedThe source-map-js library, up to version 1.2.1, is vulnerable due to improper validation of per-section offset line values in indexed source maps, enabling attackers to inject excessively large numeric values. This flaw can lead to significant synchronous event loop blocking, disrupting service availability by preventing the handling of other requests. Organizations using this library should prioritize remediation to mitigate the risk of denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the service from handling other requests.