Uncontrolled Resource Consumption in json-bigint · CVE-2020-8237 · GitHub Advisory Database · GitHub

Uncontrolled Resource Consumption in json-bigint

High severity GitHub Reviewed Published May 7, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

json-bigint (npm)

Affected versions

< 1.0.0

Patched versions

1.0.0

Description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

References

Published by the National Vulnerability Database

Sep 18, 2020

Reviewed Apr 28, 2021

Published to the GitHub Advisory Database May 7, 2021

Last updated Feb 1, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H