Description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

Remediation

References

https://hackerone.com/reports/916430

Related Vulnerabilities

CVE-2022-36010 Vulnerability in npm package react-editable-json-tree

CVE-2023-45648 Vulnerability in maven package org.apache.tomcat:tomcat-coyote

CVE-2023-50578 Vulnerability in maven package net.mingsoft:ms-mcms

CVE-2020-15152 Vulnerability in npm package ftp-srv

CVE-2022-36036 Vulnerability in npm package mdx-mermaid

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory