What’s Vulnerable › Vulnerabilities

CVE-2021-23429: Denial of Service (DoS)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-24 · updated 2026-06-17
• Weakness: CWE-755

Description

All versions of package transpile are vulnerable to Denial of Service (DoS) due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to() function.

Affected products

• transpile: all versions

References

• https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53
• https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774
• https://github.com/stealjs/transpile/blob/56aaeb26f69496e45a60c03dc92653d53021d4ac/main.js%23L53
• https://snyk.io/vuln/SNYK-JS-TRANSPILE-1290774

Get alerted when CVE-2021-23429 or the next vulnerability affects your stack