Moderate severityOSV Advisory· Published Sep 24, 2026· Updated Oct 16, 2026
CVE-2026-97058
CVE-2026-97058
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sprintf-jsnpm | <= 1.1.3 | — |
Affected products
1- Range: 1.1.2, 1.1.1, 1.1.0, …
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-hp3w-g68c-fv3cghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-97058ghsaADVISORY
- github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.jsghsaWEB
- github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.jsghsaWEB
- github.com/alexei/sprintf.js/issues/237ghsaWEB
- github.com/alexei/sprintf.js/issues/237ghsaWEB
- www.vulncheck.com/advisories/sprintf-js-through-1.1.3-denial-of-service-via-unbounded-precisionghsaWEB
News mentions
0No linked articles in our index yet.