high7.5
CVE-2018-7560
AWS Lambda parser is vulnerable to Regular Expression Denial of Service
Impact
index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | aws-lambda-multipart-parser | < 0.1.2 | 0.1.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aws-Lambda-Multipart-Parser Project | Aws-Lambda-Multipart-Parser | through 0.1.1 |