Vulnerabilities > CVE-2022-25758 - Unspecified vulnerability in Scss-Tokenizer Project Scss-Tokenizer
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |