Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2023-36479 Vulnerability in maven package org.eclipse.jetty:jetty-servlets
CVE-2023-22477 Vulnerability in npm package mercurius
CVE-2017-16821 Vulnerability in maven package org.b3log:symphony
CVE-2021-41183 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2020-16040 Vulnerability in maven package org.webjars.npm:electron