GitHub Advanced Security / CodeQL
failed
Mar 8, 2024 in 4s
2 new alerts including 2 high severity security vulnerabilities
New alerts in code changed by this pull request
Security Alerts:
See annotations below for details.
View all branch alerts .
Annotations
Check failure on line 43 in packages/estransform/lib/sourcemaps.js
See this annotation in the file changed.
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data
High
This regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'.
Check failure on line 35 in packages/estransform/lib/sourcemaps.js
See this annotation in the file changed.
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data
High
This regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'. regular expression that depends on library input may run slow on strings starting with '/*sourceMappingURL=' and with many repetitions of '/*sourceMappingURL=a'.