Advisory issued for Node.js CSV-parse package

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast optio… Read more

Similar

Common Mistakes Made by Node.js Developers

The growth of Node.js is tremendous. It’s clear why β€” Node.js helps us move fast, it has a rich packages ecosystem, it’s battle-tested and the usage of JavaScript allows businesses to go truly full-stack and cut the development lifecycle short. However, w... (more…)

Read more »