A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37259.json"