CVE-2018-3737

Published: Jun 7, 2018

Modified: Sep 17, 2024

PUBLISHED

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

Vendor	Product	Versions
HackerOne	sshpk node module	affected `Versions up to and including 1.13.1`

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.