Description
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Remediation
References
https://hackerone.com/reports/319593
Related Vulnerabilities
CVE-2023-25570 Vulnerability in maven package com.ctrip.framework.apollo:apollo
CVE-2020-10991 Vulnerability in maven package org.mule.modules:mule-module-apikit
CVE-2019-5432 Vulnerability in maven package org.webjars.npm:mqtt-packet
CVE-2020-8929 Vulnerability in maven package com.google.crypto.tink:tink
CVE-2021-39151 Vulnerability in maven package com.thoughtworks.xstream:xstream