CVE-2020-36649
1 advisory.
npm/papaparse CVE-2020-36649: high 7.5
Regular Expression Denial of Service in papaparse
Action: Upgrade papaparse to 5.2.0 or later.
npm i papaparse@5.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.0 | - |
Fixed versions
| 5.2.0 |
Sources
- osv: GHSA-qvjc-g5vr-mfgr
- https://nvd.nist.gov/vuln/detail/CVE-2020-36649
- https://github.com/mholt/PapaParse/issues/777
- https://github.com/mholt/PapaParse/pull/779
- https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621
- https://github.com/mholt/PapaParse
- https://github.com/mholt/PapaParse/releases/tag/5.2.0
- https://snyk.io/vuln/SNYK-JS-PAPAPARSE-564258
- https://vuldb.com/?ctiid.218004
- https://vuldb.com/?id.218004
CVE-2020-36649 · published · modified · JSON