Approved changes feed: RSS · Atom

cpe:2.3:a:mootools:mootools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMootools (7235535d-f1fc-5dfd-b5a6-8cac86f30de2)
ProductMootools (7a8f8e58-8cdf-5826-b088-ce7f2b3751ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mootools/mootools-core purl2cpe 2026-06-01 10:12:09.273338
pkg:npm/mootools purl2cpe 2026-06-01 10:12:09.273340

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32821 vulnerable 2026-06-08 05:32:08.106814 Regular expression Denial of Service in MooTools
MEDIUM (6.2)
MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. No patches are available for this issue.
Published: 2023-01-03T00:00:00.000Z
Updated: 2025-03-10T21:33:30.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.