Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2017-16145 Vulnerability in npm package sspa
CVE-2022-26336 Vulnerability in maven package org.apache.poi:poi-scratchpad
CVE-2022-40084 Vulnerability in maven package org.opencrx:opencrx-core
CVE-2023-26486 Vulnerability in npm package vega
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-dist