Vulnerability DatabaseCVE-2024-27088
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2024-27088
Published:February 26, 2024
Updated:May 18, 2026
es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into "function#copy" or "function#toStringTokens" may cause the script to stall. The vulnerability is patched in v0.10.63.
Affected Packages
es5-ext (NPM):
Affected version(s) >=0.10.1 <0.10.63
Fix Suggestion:
Update to version 0.10.63
Additional Notes
The description of this vulnerability differs from MITRE.
Related Resources (6)
https://nvd.nist.gov/vuln/detail/CVE-2024-27088
https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602
https://github.com/medikoo/es5-ext/issues/201
https://github.com/medikoo/es5-ext
https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2
https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h
Do you need more information?
Contact Us
Weakness Type (CWE)
Uncontrolled Resource Consumption
CWE-400
Inefficient Regular Expression Complexity
CWE-1333
EPSS
Base Score:
2.00