CVE-2018-3737

CVE-2018-3737

Vendor Hackerone

Product sshpk node module

Weakness CWE-770 · Uncontrolled resource consumption

Published June 7, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3737 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/770.html

Related vulnerabilities

04Related CVE

CVE-2024-47874 Starlette Denial of service (DoS) via multipart/form-data CVE-2026-32980 OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request CVE-2025-65015 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads CVE-2023-20155 CVE-2026-27663