Lucene search
+L

1 matches found

OSV
OSV
added 2018/09/17 8:44 p.m.56 views

GHSA-8462-Q7X7-G2X4 js-bson vulnerable to REDoS

The MongoDB bson JavaScript module also known as js-bson versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service ReDoS in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString function is called to parse a long untrusted string...

7.5CVSS5.9AI score0.01941EPSS
SaveExploits1References5
Rows per page
Query Builder