@rocket.chat/core-typings (>=6.3.0 <=6.3.13), @rocket.chat/rest-typings (>=6.3.0 <=6.3.13) potentially affected by CVE-2024-46935 via @rocket.chat/message-parser (=0.31.24)

@rocket.chat/message-parser NPM version =0.31.24 is affected by a known vulnerability. The following packages have a transitive dependency on @rocket.chat/message-parser and may be impacted: - @rocket.chat/core-typings =6.3.0, =6.3.0, =6.3.13 Source cves: CVE-2024-46935 Source advisory:...

CVE-2024-46935

Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8 and earlier are affected by a Denial of Service due to an issue in the message parser that can be triggered by crafted messages. Impact is DoS with workspace crash; no exploitation details are provided in the documents. Affected components a...