Description
The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
Remediation
References
https://github.com/get/parsejson/issues/4
https://nodesecurity.io/advisories/528
Related Vulnerabilities
CVE-2012-0391 Vulnerability in maven package com.opensymphony:xwork-core
CVE-2022-41251 Vulnerability in maven package org.jenkins-ci.plugins:apprenda
CVE-2021-41183 Vulnerability in maven package org.webjars:jquery-ui
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-beans
CVE-2017-18640 Vulnerability in maven package org.yaml:snakeyaml