description: sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
problem types: Allocation of Resources Without Limits or Throttling (CWE-770)
affected:
{
product: sshpk node module
vendor: HackerOne
versions:
status: affected, version: Versions up to and including 1.13.1
}