stream-json vulnerabilities (npm)
4 vulnerabilities.
-
stream-jsonnpm stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service 6.2 Medium -
stream-jsonnpm stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects 5.1 Medium -
stream-jsonnpm stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk 6.2 Medium -
stream-jsonnpm stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS) 6.2 Medium