Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2020-13445 Vulnerability in maven package com.liferay:com.liferay.portal.template.freemarker
CVE-2021-25329 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2021-43849 Vulnerability in npm package cordova-plugin-fingerprint-aio
CVE-2021-21118 Vulnerability in npm package electron
CVE-2020-28501 Vulnerability in npm package es6-crawler-detect