Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
Vulnerability Description
SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parser contains unbounded recursion in the restOfExp function and the lispify/lispifyExpr call chain. An attacker can crash any Node.js process that parses untrusted input by supplying deeply nested expressions (e.g., ~2000 nested parentheses), causing a RangeError: Maximum call stack size exceeded that terminates the process. This vulnerability is fixed in 0.8.36.
CVSS Information
N/A
Vulnerability Type
未经控制的递归
Vulnerability Title
SandboxJS 安全漏洞
Vulnerability Description
SandboxJS是nyariv个人开发者的一个安全评估软件。 SandboxJS 0.8.36之前版本存在安全漏洞，该漏洞源于解析器存在无限递归，可能导致进程崩溃。
CVSS Information
N/A
Vulnerability Type
N/A