Description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

Remediation

References

https://hackerone.com/reports/916430

Related Vulnerabilities

CVE-2023-25572 Vulnerability in npm package react-admin

CVE-2015-5688 Vulnerability in npm package geddy

CVE-2011-0013 Vulnerability in maven package tomcat:catalina

CVE-2022-25940 Vulnerability in maven package org.webjars.npm:lite-server

CVE-2022-3224 Vulnerability in npm package parse-url

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory