Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/19 8:29 p.m.9 views

GHSA-33HQ-FVWR-56PM devalue affected by CPU and memory amplification from sparse arrays

Under certain circumstances, serializing sparse arrays using uneval or stringify could cause CPU and/or memory exhaustion. When this occurs on the server, it results in a DoS. This is extremely difficult to take advantage of in practice, as an attacker would have to manage to create a sparse arra...

6.3CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder