Description
The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never return.
References (5)
Scores
CVSS v3
7.5
EPSS
0.0054
EPSS Percentile
67.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-835
Status
published
Products (2)
jpeg-js_project/jpeg-js
< 0.4.4
npm/jpeg-js
0 - 0.4.4npm
Published
Jun 10, 2022
Tracked Since
Feb 18, 2026