Uncontrolled Resource Consumption in json-bigint

高危 7.5CVE-2020-8237 · GHSA-wgfq-7857-4jcc · Published 18/09/2020 · updated 17/06/2026

要点

CVE-2020-8237 是影响 json-bigint (json-bigint project), json-bigint 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.7%，高于 77.5% 的漏洞。
修复：升级到 1.0.0 或更高版本。

Package	Affected versions	Patched versions
json-bigint json-bigint_project	`< 1.0.0`	`1.0.0`
json-bigint npm	`< 1.0.0`	`1.0.0`

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

NVD description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.