CVE-2018-3737CWE-770

CVE-2018-3737: vulnerability in HackerOne sshpk node module

Published · Updated

Follow this CVE+ Monitor sshpk node module+ Monitor node-sshpk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Affected products
HackerOne · sshpk node module