JSON Editor is a web-based tool to view, edit, format, and validate JSON. It has various modes such as a tree editor, a code editor, and a plain text editor. The jsoneditor package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-3822
• josdejong/jsoneditor@092e386
• https://huntr.dev/bounties/1e3ed803-b7ed-42f1-a4ea-c4c75da9de73