TI-2026-63115 CVE-2026-93749 · GHSA-68fv-2mgg-jv7qsource-map-js through 1.2.1 Event Loop Denial of ServicePriority MEDIUM 44source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00455 · Published 2026-09-18 · Partial fix · 1.2.2 CWE-1284