Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://nodesecurity.io/advisories/528
https://github.com/get/parsejson/issues/4
Related Vulnerabilities
CVE-2020-11620 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2019-12419 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-sso-oidc
CVE-2021-41183 Vulnerability in npm package jquery-ui
CVE-2018-3774 Vulnerability in maven package org.webjars.npm:url-parse
CVE-2019-11405 Vulnerability in maven package org.openapitools:openapi-generator-project