Threats tagged 'ghsa-mw8j-wq3m-9899'

Eclipse Langium versions 3.2.0 through 4.4.0 have an inefficient algorithmic complexity issue in the opt-in IndentationAwareTokenBuilder and IndentationAwareLexer components. The issue causes tokenization to take quadratic time for documents with frequent indentation changes, blocking the Node.js event loop and resulting in a denial of service. Languages using the default lexer and token builder are not affected.