Description
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Remediation
References
https://hackerone.com/reports/319593
Related Vulnerabilities
CVE-2021-23440 Vulnerability in npm package set-value
CVE-2020-10672 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2021-3664 Vulnerability in npm package url-parse
CVE-2020-7704 Vulnerability in npm package linux-cmdline
CVE-2023-36106 Vulnerability in maven package tech.powerjob:powerjob