WS-2017-0278

Affected versions of the js-quantities package all, are vulnerable to Out-Of-Memory attacks...

Denial Of Service (DoS)

js-quantities is vulnerable to denial of service DoS attacks through out-of-memoryOOM.The vulnerability exists due to the function parse in quantities.js which does not properly handle unsanitized user inputs.An attacker can exploit this flaw by inserting evil input strings, leading to an...