Memory Allocation Vulnerability in js-beautify by Beautifier

CVE-2026-109149

What is CVE-2026-109149?

A vulnerability has been detected in js-beautify versions up to 1.15.1 and 2.0.3, where an unknown function is susceptible to exploitation. This weakness allows for uncontrolled memory allocation, which could be leveraged by an attacker to manipulate the application's operation remotely, potentially causing Denial of Service conditions. The vendor's lack of response to initial disclosures raises concerns about addressing this critical security issue.

References