Description

The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.

Remediation

References

https://nodesecurity.io/advisories/528

https://github.com/get/parsejson/issues/4

Related Vulnerabilities

CVE-2022-2217 Vulnerability in npm package parse-url

CVE-2020-6468 Vulnerability in npm package electron

CVE-2017-7680 Vulnerability in maven package org.apache.openmeetings:openmeetings-server

CVE-2019-19771 Vulnerability in npm package bs58chekc

CVE-2017-16570 Vulnerability in npm package keystone

Severity

High

Classification

CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Third Party Advisory Exploit Issue Tracking