The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via a crafted string.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| is-my-json-valid(npm) | 0 | 2.12.4 | N/A |
CVSS Metrics
