Lucene search

K
nodejsAdam BaldwinNODEJS:76
HistoryJan 17, 2016 - 9:04 p.m.

Regular Expression Denial of Service

2016-01-1721:04:10
Adam Baldwin
www.npmjs.com
14

EPSS

0.004

Percentile

74.7%

Overview

Versions of is-my-json-valid prior to 2.12.4 are affected by a regular expression denial of service vulnerability when user input is allowed into a utc-millisec validator.

Recommendation

Update to version 2.12.4 or later.

EPSS

0.004

Percentile

74.7%