Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/14 3:42 p.m.14 views

AZL-42034 CVE-2024-4068 affecting package reaper for versions less than 3.1.1-9

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating...

7.5CVSS6.7AI score0.01471EPSS
SaveExploits1References1
Rows per page
Query Builder