Regular Expression Denial of Service

🗓️ 17 Jan 2016 21:04:10Reported by Adam BaldwinType

Versions of `is-my-json-valid` prior to 2.12.4 affected by regular expression denial of service vulnerability in `utc-millisec` validator. Update to version 2.12.4 or later

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool	17 Jun 201805:13	–	ibm
IBM Security Bulletins	Security Bulletin: Current Releases of IBM® SDK for Node.js™ in IBM Bluemix are affected by CVE-2016-3956, CVE-2016-2515 and CVE-2016-2537.	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2016-2515 and CVE-2016-2537	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in NPM affects IBM API Connect (CVE-2016-3956, CVE-2016-2537, CVE-2016-2515)	15 Jun 201807:05	–	ibm
CNVD	Joyent Node.js is-my-json-valid Denial of Service Vulnerability	25 Feb 201600:00	–	cnvd
CVE	CVE-2016-2537	23 Feb 201602:00	–	cve
Cvelist	CVE-2016-2537	23 Feb 201602:00	–	cvelist
EUVD	EUVD-2017-0222	7 Oct 202500:30	–	euvd
Github Security Blog	Moderate severity vulnerability that affects is-my-json-valid	31 Jul 201822:54	–	github