CVE-2018-3737
1 advisory.
npm/sshpk CVE-2018-3737: high 7.5
Regular Expression Denial of Service in sshpk
Action: Upgrade sshpk to 1.13.2 or later.
npm i sshpk@1.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.2 | - |
Fixed versions
| 1.13.2 |
Sources
- osv: GHSA-2m39-62fm-q8r3
- https://nvd.nist.gov/vuln/detail/CVE-2018-3737
- https://github.com/joyent/node-sshpk/commit/46065d38a5e6d1bccf86d3efb2fb83c14e3f9957
- https://hackerone.com/reports/319593
- https://github.com/advisories/GHSA-2m39-62fm-q8r3
- https://github.com/joyent/node-sshpk/blob/v1.13.1/lib/formats/ssh.js#L17
- https://www.npmjs.com/advisories/606
CVE-2018-3737 · published · modified · JSON