Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the service from handling other requests.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🚨HIGH - source-map-js Indexed Source Map Offset Line DoS (CVE-2026-93749) source-map-js fails to validate the per-section offset line value in indexed source maps. Supplying extremely large numeric offset.line values forces long synchronous processing that blocks the Node.js event loop, causing a denial of service. Non-indexed source maps aren’t affected. 👉Affected: source-map-js <= 1.2.1
CVE-2026-93749: source-map-js thru 1.2.1 fails to validate section offset line values in indexed source maps. Crafted input blocks the event loop, causing DoS. CVSS 7.5. No patch yet. Update immediately or restrict https://www.valtersit.com/cve/CVE-2026-93749/ #CVE #infosec #cybersecurity #sourcemapjs #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker