CVE-2014-5256

Name of the Vulnerable Software and Affected Versions Node.js versions 0.8.0 through 0.8.27 Node.js versions 0.10.0 through 0.10.29

Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, via deep JSON objects. This occurs when the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt is not considered.

Recommendations For Node.js versions 0.8.0 through 0.8.27, update to version 0.8.28 or later. For Node.js versions 0.10.0 through 0.10.29, update to version 0.10.30 or later.