| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.27.0-0, < 1.27.2< 1.26.9 | 1.27.21.26.9 |
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.
We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free