Description
JSON Editor is a web-based tool to view, edit, format, and validate JSON. It has various modes such as a tree editor, a code editor, and a plain text editor. The jsoneditor package is vulnerable to ReDoS (regular expression denial of service).
Recommendation
Update the jsoneditor package to the latest compatible version. Followings are version details:
- Affected version(s): < 9.5.6
- Patched version(s): 9.5.6
References
Could your website be exposed too?
SmartScanner can check your website for Regular Expression Denial of Service in jsoneditor and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular expression Denial of Service in multiple packages - @ckeditor/ckeditor5-paste-from-office - CVE-2021-21391
- Regular expression Denial of Service in multiple packages - @ckeditor/ckeditor5-media-embed - CVE-2021-21391
- Regular expression Denial of Service in multiple packages - @ckeditor/ckeditor5-list - CVE-2021-21391
- Regular expression Denial of Service in multiple packages - @ckeditor/ckeditor5-image - CVE-2021-21391
You might also like:
See something that needs correcting? Let us knowUpdated February 12, 2025