CVE-2016-2537

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a…

published February 23, 2016

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via a crafted string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01849 · 78.8th percentile
Published
2016-02-23T02:00Z
EPSS history
Timeline
  • 23 FEB 02:00Z
    The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a…
    cvelistv5