CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: OSV:GHSA-HHFG-6HFC-RVXM...

@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: GHSA-HHFG-6HFC-RVXM...

CVE-2021-3822

creationtimestamp| type| source ---|---|--- 2021-09-27 16:34:55+00:00| seen| https://t.me/cibsecurity/29456...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

0.8.18-p11 (0.8.18-p12), @abtasty-innovation/module-wrapper (>=0.1.0, <=0.2.31) +227 more potentially affected by CVE-2021-3822 via jsoneditor (>=3.2.0, <=9.5.5)

jsoneditor NPM version =3.2.0, =0.1.0, =0.0.2, =0.1.0-snapshot.1, =2.6.4, =0.0.4, =0.0.27, =0.0.1, =0.0.1, =0.5.0-before.9, =0.1.1, =0.0.1, =0.0.46, =0.0.57 and more Source cves: CVE-2021-3822 Source advisory: MEND:CVE-2021-3822...

CVE-2021-3822

The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...