CVE-2021-4437

npm/@lambda-middleware/json-deserializer CVE-2021-4437: low 3.5, EPSS 0.45%

lambda-middleware Inefficient Regular Expression Complexity vulnerability

Action: Upgrade @lambda-middleware/json-deserializer to 1.1.0 or later.

npm i @lambda-middleware/json-deserializer@1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-m3f4-957x-m785
• https://nvd.nist.gov/vuln/detail/CVE-2021-4437
• https://github.com/dbartholomae/lambda-middleware/pull/57
• https://github.com/dbartholomae/lambda-middleware/commit/f689404d830cbc1edd6a1018d3334ff5f44dc6a6
• https://github.com/dbartholomae/lambda-middleware
• https://github.com/dbartholomae/lambda-middleware/releases/tag/%40lambda-middleware%2Fframeguard_v1.1.0
• https://github.com/dbartholomae/lambda-middleware/releases/tag/@lambda-middleware/frameguard_v1.1.0
• https://vuldb.com/?ctiid.253406
• https://vuldb.com/?id.253406

CVE-2021-4437 · published 2024-02-12T21:30:55Z · modified 2024-03-01T14:41:48Z · JSON