Description
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Remediation
References
https://hackerone.com/reports/319593
Related Vulnerabilities
CVE-2022-3509 Vulnerability in maven package com.google.protobuf:protobuf-javalite
CVE-2023-46493 Vulnerability in npm package @evershop/evershop
CVE-2021-22964 Vulnerability in npm package fastify-static
CVE-2022-39236 Vulnerability in npm package matrix-js-sdk
CVE-2020-17527 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core