GitHub Advisoryadvisory · npm

GHSA-6jqp-j69q-pm62 AWS Lambda parser is vulnerable to Regular Expression Denial of Service

HIGH Published 2018-03-05 Modified 2022-04-25 Official page ↗
Aliases
CVE-2018-7560
Ecosystem
npm
Packages
aws-lambda-multipart-parser
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2020-06-16

Affected packages

• npm aws-lambda-multipart-parser: < 0.1.2 → fixed in 0.1.2

Description

index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.

Related

Alias · CVE (1)

  • CVE-2018-7560 index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS)… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References