Skip to content
OpenAdvisories
High · 7.5 CVE-2020-8237 EUVD-2021-1219GHSA-wgfq-7857-4jcc

Uncontrolled Resource Consumption in json-bigint

Published Sep 18, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Package: json-bigint Ecosystem: npm

Description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

Affected products

VendorProductAffectedFixed
— json-bigint Fixed in version 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm json-bigint < 1.0.0 1.0.0 GHSA-wgfq-7857-4jcc

References