Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5157
HistorySep 22, 2017 - 8:07 a.m.

Regular Expression Denial Of Service (ReDoS)

2017-09-2208:07:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

45.5%

parsejson is vulnerable to regular expression denial of service (ReDoS) attacks. An attacker can pass a JSON file to the library that when parsed can cause a ReDoS.

EPSS

0.001

Percentile

45.5%