High severityNVD Advisory· Published Jun 7, 2018· Updated Sep 16, 2024
CVE-2017-16113
CVE-2017-16113
Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
parsejsonnpm | <= 0.0.3 | — |
Affected products
1- Range: <=0.0.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/advisories/GHSA-q75g-2496-mxppghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-16113ghsaADVISORY
- github.com/get/parsejson/issues/4ghsax_refsource_MISCWEB
- nodesecurity.io/advisories/528mitrex_refsource_MISC
- www.npmjs.com/advisories/528ghsaWEB
News mentions
0No linked articles in our index yet.