Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2022-41654 Vulnerability in npm package ghost
CVE-2019-1010091 Vulnerability in npm package tinymce
CVE-2021-23370 Vulnerability in npm package swiper
CVE-2020-13949 Vulnerability in maven package org.apache.thrift:libthrift
CVE-2020-7793 Vulnerability in maven package org.webjars.npm:ua-parser-js