Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2020-28279 Vulnerability in npm package flattenizer
CVE-2020-12668 Vulnerability in maven package com.hubspot.jinjava:jinjava
CVE-2020-10688 Vulnerability in maven package org.jboss.resteasy:resteasy-core
CVE-2022-36099 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki