Description
index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.
Remediation
References
https://github.com/myshenin/aws-lambda-multipart-parser/commit/56ccb03af4dddebc2b2defb348b6558783d5757e
Related Vulnerabilities
CVE-2018-8032 Vulnerability in maven package org.apache.axis:axis
CVE-2018-3729 Vulnerability in npm package localhost-now
CVE-2022-30500 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2022-43435 Vulnerability in maven package org.jenkins-ci.plugins.plugin:fireline
CVE-2018-3713 Vulnerability in npm package angular-http-server