Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-07932
HistoryJan 27, 2022 - 12:00 a.m.

Jsish NumberConstructor Denial of Service Vulnerability

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
2

0.001 Low

EPSS

Percentile

34.8%

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which is caused by a failure to properly handle incoming error messages and could lead to a denial of service (DoS) via the NumberConstructor in src/jsiNumber.c. .

CPENameOperatorVersion
jsish jsisheq3.5.0

0.001 Low

EPSS

Percentile

34.8%

Related for CNVD-2022-07932