Description

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

Remediation

References

https://github.com/phax/ph-commons/issues/35

Related Vulnerabilities

CVE-2021-25946 Vulnerability in npm package nconf-toml

CVE-2019-5437 Vulnerability in npm package harp

CVE-2021-23355 Vulnerability in npm package ps-kill

CVE-2022-22984 Vulnerability in npm package snyk-gradle-plugin

CVE-2021-23448 Vulnerability in npm package config-handler

Severity

High

Classification

CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Issue Tracking Third Party Advisory