Skip to content

hjson-js stack exhaustion vulnerability #66

Description

@scacaca

Summary

A DOS vulnerability in hjson-js caused by crafted objects that deeply nested structures.

Description

An issue was discovered in the latest hjson-js allows attackers to cause a denial of service or other unspecified impacts via crafted objects that deeply nested structures.
there is a similar vulnerable,but hjson-js has not similar fix logic.
The relevent code in file1
Eg. function array(),function value(),function object()

Patch

there is a similar fix logic

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions