16 matches found
toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
Summary toml.parse is vulnerable to a quadratic-complexity On² denial-of-service via a single long dotted key, table header, or inline-table key. A 100KB crafted document causes a multi-second synchronous hang; a 200KB document crashes the Node.js process outright with an uncatchable out-of-memor...
8.7CVSS6.3AI score0.00473EPSS
SaveExploits0References5Affected Software1
20