CVE-2021-4437CWE-1333

dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos

Low · published February 12, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The manipulation leads to inefficient regular expression complexity. Upgrading to version 1.1.0 is able to address this issue. The patch is identified as f689404d830cbc1edd6a1018d3334ff5f44dc6a6. It is recommended to upgrade the affected component. VDB-253406 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.8th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2024-02-12T19:31Z
EPSS history
Timeline
  • 12 FEB 19:31Z
    dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos
    cvelistv5