EUVD-2019-0686

Malware in sbrugna...

GHSA-582F-P4PG-XC74 Regular Expression Denial of Service in csv-parse

Versions of csv-parse prior to 4.4.6 are vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large specially-crafted input very slowly, leading to a Denial of Service. This is triggered when using the cast option...

PT-2019-15217

Name of the Vulnerable Software and Affected Versions csv-parse versions prior to 4.4.6 Description The issue concerns a Regular Expression Denial of Service in the isInt function, which contains a malformed regular expression. This function processes large crafted input very slowly when the cast...