CVE-2026-33750: Sequence Expansion Zero Step Dos

Sequence expansion logic computes a step increment using `Math.abs` without enforcing a non-zero minimum. If the step evaluates to 0, this can lead to an infinite loop (Denial of Service). Enforce a minimum increment, e.g. with `Math.max(Math.abs(step), 1)`.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-33750-sequence-expansion-zero-step-dos --engine opengrep

Description

Sequence expansion logic computes a step increment using `Math.abs` without enforcing a non-zero minimum. If the step evaluates to 0, this can lead to an infinite loop (Denial of Service). Enforce a minimum increment, e.g. with `Math.max(Math.abs(step), 1)`.