105 matches found
devalue: devalue: Excessive memory consumption via deserialization of sparse arrays
A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the devalue.parse function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resultin...
7.5CVSS5.5AI score0.00397EPSS
SaveExploits0References7
20