Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | parsejson node module | <=0.0.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | parsejson | <= 0.0.3 | — | GHSA-q75g-2496-mxpp |