Regular Expression Denial of Service in parsejson

Description

Affected versions of parsejson are vulnerable to a regular expression denial of service when parsing untrusted user input.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 0.0.3

References

• GHSA-q75g-2496-mxpp
• www.npmjs.com
• CVE-2017-16113
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Regular Expression Denial of Service in moment - CVE-2017-18214
• Regular Expression Denial of Service in content - CVE-2017-16111
• Regular Expression Denial of Service in timespan - CVE-2017-16115
• Regular Expression Denial Of Service in uri-js - CVE-2017-16021

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

parsejson