Description

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

Remediation

References

https://github.com/phax/ph-commons/issues/35

Related Vulnerabilities

CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts

CVE-2023-26102 Vulnerability in npm package rangy

CVE-2021-23446 Vulnerability in npm package handsontable

CVE-2022-29631 Vulnerability in maven package org.jodd:jodd-http

CVE-2023-36472 Vulnerability in npm package @strapi/admin

Severity

High

Classification

CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Issue Tracking Third Party Advisory