Description
Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.
Remediation
References
https://hackerone.com/reports/916430
Related Vulnerabilities
CVE-2021-23372 Vulnerability in npm package mongo-express
CVE-2021-36774 Vulnerability in maven package org.apache.kylin:kylin-core-common
CVE-2020-16040 Vulnerability in maven package org.webjars.npm:electron
CVE-2014-0002 Vulnerability in maven package org.apache.camel:camel-core
CVE-2022-41966 Vulnerability in maven package com.thoughtworks.xstream:xstream