[CYBERDIGEST]
⊞ Dashboard ⚡ Intelligence 📝 Reports 📚 Global Threats 💻 Hack Lab 🗄️ Resources ⌬ 0xJerry's Lab
📡 RSS Feed
System Online

Tag

#quadratic expansion

newsHIGH 8.2

devalue Vulnerability: Quadratic Expansion in uneval

A vulnerability in the devalue library, specifically in the uneval function, can cause quadratic expansion when handling repeated primitive strings, leading to potential performance issues and amplification attacks. This affects devalue versions <= 5.9.2. Update to version 5.9.3 or later to mitigate.

Oct 2, 20261 source