Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/13 3:40 p.m.17 views

flatted vulnerable to unbounded recursion DoS in parse() revive phase

Summary flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process. Impact...

7.5CVSS5.9AI score0.00807EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder