GitHub Advisoryadvisory · npm
GHSA-wgfq-7857-4jcc Uncontrolled Resource Consumption in json-bigint
HIGH
Official page ↗
- Aliases
- CVE-2020-8237
- Ecosystem
- npm
- Packages
- json-bigint
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
- Reviewed
- 2021-04-28
Affected packages
• npm json-bigint: < 1.0.0 → fixed in 1.0.0
Description
Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.
Related
Alias · CVE (1)
- CVE-2020-8237 Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack. vulnerability
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness