08cms (=1.0.0), 18a58t9c-upload (>=1.0.0 <=1.0.3) +3452 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1 <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs =0.0.3 and more Source cves: CVE-2022-25851 Source advisory: OSV:GHSA-XVF7-4V9Q-58W6...

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851

CVE-2022-25851 affects the jpeg-js package prior to 0.4.4, with a Denial of Service caused by improper input validation that can trigger an infinite loop. IBM’s security bulletin clarifies impact to IBM Edge Application Manager (versions 4.3 and 4.4) and notes the existence of fixes via a docker ...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...