CVE-2018-13863
1 advisory.
npm/bson CVE-2018-13863: high 7.5, EPSS 1.94%
js-bson vulnerable to REDoS
Action: Upgrade bson to 1.0.5 or later.
npm i bson@1.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | 1.0.5 | - |
Fixed versions
| 1.0.5 |
Sources
- osv: GHSA-8462-q7x7-g2x4
- https://nvd.nist.gov/vuln/detail/CVE-2018-13863
- https://github.com/mongodb/js-bson/commit/bd61c45157c53a1698ff23770160cf4783e9ea4a
- https://github.com/advisories/GHSA-8462-q7x7-g2x4
- https://github.com/mongodb/js-bson
- https://snyk.io/vuln/npm:bson:20180225
CVE-2018-13863 · published · modified · JSON