PT-2019-15217

CVE-2019-17592

·

Published

2019-10-14

·

Updated

2022-01-01

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions csv-parse versions prior to 4.4.6
Description The issue concerns a Regular Expression Denial of Service in the isInt() function, which contains a malformed regular expression. This function processes large crafted input very slowly when the cast option is used, leading to a Denial of Service.
Recommendations Upgrade to version 4.4.6 or later. As a temporary workaround, consider avoiding the use of the cast option until the issue is resolved.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-582F-P4PG-XC74
Found an issue in the description? Have something to add? Feel free to write us 👾