npm

source-map-js

Security advisories for source-map-js, newest first. 1 known, all fixed. If you’re on 1.2.2 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

1.2.2

Advisories

1 · 0 unfixed

Last advisory

18 Sep 2026

Safe from

1.2.2

1 advisory · newest first

HIGH7.5 18 Sep 2026

source-map-js allows event-loop denial of service through indexed source-map section offsets

GHSA-68fv-2mgg-jv7q · CVE-2026-93749

Affected

≥ 1.0.0, < 1.2.2

Fixed in

1.2.2

Published

18 Sep 2026

/advisories/npm/source-map-js/feed.rss

From the GitHub advisory database, via OSV · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →