PT-2019-15217

CVE-2019-17592

·

Publicado

2019-10-14

·

Atualizado

2022-01-01

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions csv-parse versions prior to 4.4.6
Description The issue concerns a Regular Expression Denial of Service in the isInt() function, which contains a malformed regular expression. This function processes large crafted input very slowly when the cast option is used, leading to a Denial of Service.
Recommendations Upgrade to version 4.4.6 or later. As a temporary workaround, consider avoiding the use of the cast option until the issue is resolved.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
GHSA-582F-P4PG-XC74
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾