CVE-2019-17592: Uncontrolled Resource Consumption

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

Regular Expression Denial Of Service (ReDoS)

csv-parse is vulnerable to regular expression regex denial of service. The isInt function contains a malformed regular expression when using the cast option. The regex processes large malicious input slowly which can potentially lead to an application crash...

Npmjs 'csv-parse' Module CVE-2019-17592 Denial of Service Vulnerability

Description Npmjs 'csv-parse' module is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a denial-of-service condition. Versions prior to csv-parse module 4.4.6 are vulnerable; other versions may also be affected. Technologies Affected Npmjs csv-parse 0.1.0...

Regular Expression Denial of Service

Overview Versions of csv-parse prior to 4.4.6 are vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large specially-crafted input very slowly, leading to a Denial of Service. This is triggered when using the cast option...