What’s Vulnerable › Vulnerabilities

CVE-2016-10527

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-31 · updated 2026-06-17
• Weakness: CWE-400

Description

The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.

Affected products

• HackerOne riot-compiler node module: 2.3.21

References

• https://github.com/riot/compiler/issues/46
• https://nodesecurity.io/advisories/86
• https://github.com/riot/compiler/issues/46
• https://nodesecurity.io/advisories/86

Get alerted when CVE-2016-10527 or the next vulnerability affects your stack