~/products/csv-parse_project/csv-parse

pipeline liveDigest Docs

Csv-Parse Project Csv-Parse vulnerabilities

1 known vulnerability affecting csv-parse_project/csv-parse.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2019-17592P3HIGHCVSS 7.5fixed in 4.4.62019-10-14

CVE-2019-17592 [HIGH] CWE-400 CVE-2019-17592: The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option.

Csv-Parse Project Csv-Parse vulnerabilities | cvebase