Lucene search
+L

4 matches found

OSV
OSV
•added 2026/03/13 3:40 p.m.•13 views

GHSA-25H7-PFQ9-P65F flatted vulnerable to unbounded recursion DoS in parse() revive phase

Summary flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process. Impact...

7.5CVSS7.3AI score0.0103EPSS
SaveExploits1References5
Rows per page
Query Builder