CVE-2016-10527: Riot.js Riot-Compiler

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.

Affected products

• Riot.js Riot-Compiler: version 2.3.21 only

Published 2018-05-31. Last modified 2026-06-17.