-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| azle | npm | >= 0.27.0, < 0.30.0 | 0.30.0 |
The vulnerability manifests specifically through the setTimer function as described in all advisory sources. The infinite loop occurs because each timer execution attempts to clean up the previous timer's global state, which inadvertently schedules a new timer. This matches CWE-835 (infinite loop) and aligns with the patch notes mentioning state machine improvements in v0.30.0. While exact code isn't shown, the function name and behavior are explicitly documented across all sources, justifying high confidence.
Ongoing coverage of React2Shell