CVE-2016-2537

CVE-2016-2537 affects the is-my-json-valid package for Node.js, where an incorrect exports["utc-millisec"] regular expression can be exploited to cause a denial-of-service by blocking the event loop. The core detail across documents is that the vulnerability arises in the is-my-json-valid module ...