Braces · Braces · CVE-2024-4068
**Name of the Vulnerable Software and Affected Versions**
braces versions prior to 3.0.3
**Description**
The issue is related to uncontrolled resource consumption. If a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, causing the program to allocate heap memory without freeing it, eventually leading to a crash due to the JavaScript heap limit being reached.
**Recommendations**
For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue.
As a temporary workaround, consider restricting input to prevent "imbalanced braces" from being sent to the `lib/parse.js` module until a patch is available.