Description
All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.
Remediation
References
https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53
https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774
Related Vulnerabilities
CVE-2018-1002203 Vulnerability in maven package org.webjars.npm:unzipper
CVE-2023-34981 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2022-21803 Vulnerability in maven package org.webjars.npm:nconf
CVE-2020-8203 Vulnerability in maven package org.webjars.npm:lodash
CVE-2020-28282 Vulnerability in maven package org.webjars.npm:getobject