CVE-2026-93749

Name of the Vulnerable Software and Affected Versions source-map-js versions 1.2.1 and earlier

Description The software fails to validate the per-section offset line value in indexed source maps. An attacker can provide arbitrary and extremely large numeric values for these offsets, which leads to synchronous event loop blocking for extended periods. This condition prevents the service from processing other requests, resulting in a Denial of Service (DoS), a state where a system is unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.