Excessively Deep Nesting
CWE-1124
The code contains a callable or other code grouping in which the nesting / branching is too deep.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.5.
Latest Excessively Deep Nesting vulnerabilities
- 7.5 High severity
eml_parser: Allocation of Resources Without Limits or Throttling
eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.routing.noparenthesis in eml_parser/routing.py removes parenthesized CFWS comments from
- 7.5 High severity
envoy: Excessively Deep Nesting
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O(100K) nested objects are present. This vulnerability is fixed