aws-lambda-multipart-parser project vulnerabilities

Products

• aws-lambda-multipart-parser 1

Latest aws-lambda-multipart-parser project CVEs

Newest publication first

1. CVE-2018-7560 AWS Lambda parser is vulnerable to Regular Expression Denial of Service

   Published 2018-03-04

   High·CVSS 7.5 EPSS 1.4%

   index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.