typescript-language-server
Version: 5.3.0Language Server Protocol implementation for TypeScript and JavaScript
What is "typescript-language-server"?
Language Server Protocol implementation for TypeScript and JavaScript
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add typescript-language-serverDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["typescript-language-server"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build typescript-language-server
min add --runtime typescript-language-serverDependencies (3)
Dependency changes
Loading diff…
Could not load the dependency diff for one of the selected versions. Try again.
No dependency changes
The two selected versions have identical direct dependencies.
| Name | Version | Kind |
|---|
Dependants (2)
| Name | Version |
|---|---|
| dev-language-servers | — |
| emacs-config-dev1 | 2.8 |
- Lines:+4 / -4Deps:3(+1 / -1)Released:
- Lines:+14 / -2Deps:3Released:
- Lines:+1 / -1Deps:3Released:
- Lines:+7 / -1Deps:3Released:
- Lines:+1Deps:3Released:
- Lines:+3 / -1Deps:3Released:
- Lines:+44Deps:3(+3)Released:
No direct advisories
This package inherits 13 transitive advisories from its dependencies.
Showing 13 transitive advisories via typescript-language-server's dependencies
No advisories match the current filters.
| Critical (0) | ||||||
| Status | IDs | Package | Severity | |||
|---|---|---|---|---|---|---|
| High (3) | ||||||
| Status | IDs | Package | Severity | |||
Affected: 1.34.8 | c-ares | High: 7.5 | ||||
Summaryc-ares can corrupt memory when an application cancels its lookups after a connection failure Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.3.2 | zlib | High | ||||
Summaryzlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate Affected ranges1.3.2 References
| ||||||
Under investigation | zlib | High | ||||
Summaryzlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write Affected ranges1.3 – 1.3.2 References
| ||||||
| Medium (9) | ||||||
| Status | IDs | Package | Severity | |||
Affected: 1.34.8 | c-ares | Medium: 4.8 | ||||
Summaryc-ares can return an address containing uninitialized memory for a numeric IPv6 name with a prefix length Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.3 | ||||
Summaryc-ares can write past a buffer when ares_dup() or ares_save_options() runs while another thread changes the servers Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can free a cached DNS answer while the application is still reading it Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can use a freed server record when an application changes its DNS servers from a callback Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can use freed memory when an application cancels lookups from a server-status callback Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.5 | ||||
Summaryc-ares can use a freed connection after the socket-state callback returns Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can use freed memory if an application cancels lookups from a callback, or shuts a channel down Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can use a freed lookup after shutting down a failed connection Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
Affected: 1.34.8 | c-ares | Medium: 5.9 | ||||
Summaryc-ares can accept a DNS reply that arrived from a different server than the one queried Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N | ||||||
| Low (1) | ||||||
| Status | IDs | Package | Severity | |||
Affected: 1.34.8 | c-ares | Low: 3.7 | ||||
Summaryc-ares query cache can return an answer that was obtained using different EDNS options Affected ranges1.34.6 – 1.34.8 CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N | ||||||
| Unknown (0) | ||||||
| Status | IDs | Package | Severity | |||
Build provenance
Loading provenance
Build provenance
Sign in to see provenance at this commit.
Build provenance
Could not load provenance.
For the signed record of what the build used, see the Provenance tab.
65 components
No components match your filter.
| Packages | Version |
|---|---|
| typescript-language-serverROOT | 5.3.0 |
| aclROOT | 2.4.0 |
| attrROOT | 2.6.0 |
| autoconf | 2.73 |
| automake | 1.18.1 |
| bash | 5.3 |
| bash-bootstrap | 5.3 |
| binutils | 2.47 |
| bison | 3.8.2 |
| bzip2 | 1.0.8 |
| c-ares | 1.34.8 |
| cmake | 4.4.2 |
| coreutils | 9.12 |
| curl | 8.23.0 |
| diffutils | 3.12 |
| expat | 2.9.0 |
| fileROOT | 5.48 |
| findutils | 4.11.0 |
| flex | 2.6.4 |
| gawk | 5.4.1 |
| gawk-bootstrap | 5.4.1 |
| gcc | 15.2.0 |
| gdbm | 1.26 |
| glibc | 2.44 |
| gmp | 6.3.0 |
| grep | 3.12 |
| gtest | 1.18.0 |
| gzip | 1.15 |
| icu | 78.3 |
| libcapROOT | 2.78 |
| libffi | 3.8.0 |
| libidn2 | 2.3.8 |
| libpsl | 0.23.3 |
| libtool | 2.6.2 |
| libunistring | 1.4.2 |
| libuv | 1.52.1 |
| linux_headers | 6.12.43 |
| lz4 | 1.10.0 |
| m4 | 1.4.21 |
| make | 4.4.1 |
| meson | 1.12.0 |
| mpc | 1.4.1 |
| mpfr | 4.2.2 |
| ncurses | 6.6 |
| nghttp2 | 1.70.0 |
| nghttp3 | 1.18.0 |
| ngtcp2 | 1.25.0 |
| ninja | 1.13.2 |
| node-lts | 24.19.0 |
| openssl | 3.6.5 |
| patch | 2.8 |
| pcre2 | 10.49 |
| perl | 5.44.0 |
| pkgconf | 3.0.5 |
| python | 3.14.8 |
| readline | 8.3 |
| sed | 4.10 |
| setuptools | 84.0.0 |
| sqlite | 3.54.0 |
| tar | 1.35 |
| tzdata | 2026e |
| util-linux | 2.42.4 |
| xz | 5.8.4 |
| zlib | 1.3.2 |
| zstd | 1.5.7 |