Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Archanasharma3

#32754of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-7923
7.8
2024-01-24
Braces · Braces · CVE-2024-4068
**Name of the Vulnerable Software and Affected Versions** braces versions prior to 3.0.3 **Description** The issue is related to uncontrolled resource consumption. If a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, causing the program to allocate heap memory without freeing it, eventually leading to a crash due to the JavaScript heap limit being reached. **Recommendations** For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue. As a temporary workaround, consider restricting input to prevent "imbalanced braces" from being sent to the `lib/parse.js` module until a patch is available.