Description
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Remediation
References
https://hackerone.com/reports/319593
Related Vulnerabilities
CVE-2016-2510 Vulnerability in maven package org.apache-extras.beanshell:bsh
CVE-2021-31411 Vulnerability in maven package com.vaadin:flow-server
CVE-2023-40346 Vulnerability in maven package io.jenkins.plugins:shortcut-job
CVE-2018-3731 Vulnerability in npm package public
CVE-2021-41183 Vulnerability in maven package org.webjars:jquery-ui