{"id":2154876,"name":"parsejson","ecosystem":"npm","description":"Method that parses a JSON string and returns a JSON object","homepage":"https://github.com/get/parsejson","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/get/parsejson","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2014-02-22T23:45:15.790Z","latest_release_published_at":"2016-10-27T15:34:51.992Z","latest_release_number":"0.0.3","last_synced_at":"2026-04-18T19:12:40.484Z","created_at":"2022-04-09T21:46:15.841Z","updated_at":"2026-04-18T19:12:40.485Z","registry_url":"https://www.npmjs.com/package/parsejson","install_command":"npm install parsejson","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.0.3"}},"repo_metadata":{"id":14400664,"uuid":"17111319","full_name":"galkn/parsejson","owner":"galkn","description":"engine.io-client JSON-parsing module","archived":true,"fork":false,"pushed_at":"2020-09-06T19:24:06.000Z","size":275,"stargazers_count":1,"open_issues_count":0,"forks_count":7,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-10-07T13:38:59.647Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/galkn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-02-23T16:11:25.000Z","updated_at":"2023-01-28T12:57:34.000Z","dependencies_parsed_at":"2022-09-12T14:25:57.638Z","dependency_job_id":null,"html_url":"https://github.com/galkn/parsejson","commit_stats":null,"previous_names":["get/parsejson"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/galkn/parsejson","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/galkn","download_url":"https://codeload.github.com/galkn/parsejson/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279001643,"owners_count":26083146,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"galkn","name":"Gal Koren","uuid":"746604","kind":"user","description":"","email":"","website":"koren.gal","location":"Berlin, Germany","twitter":null,"company":"Alteryx","icon_url":"https://avatars.githubusercontent.com/u/746604?u=eaab1e4546ca4359926dc972608c71476c303740\u0026v=4","repositories_count":29,"last_synced_at":"2024-04-11T23:09:29.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/galkn","funding_links":[],"total_stars":156,"followers":46,"following":20,"created_at":"2022-11-03T02:35:50.557Z","updated_at":"2024-04-11T23:09:32.202Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/galkn","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/galkn/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-04-12T16:14:02.477Z","dependent_packages_count":55,"downloads":1519784,"downloads_period":"last-month","dependent_repos_count":149707,"rankings":{"downloads":0.26579775487515467,"dependent_repos_count":0.08311435806842792,"dependent_packages_count":0.5577113341308515,"stargazers_count":16.710498942137473,"forks_count":6.748450776728482,"docker_downloads_count":0.17323667212913477,"average":4.089801639678254},"purl":"pkg:npm/parsejson","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NWctMjQ5Ni1teHBw","url":"https://github.com/advisories/GHSA-q75g-2496-mxpp","title":"Regular Expression Denial of Service in parsejson","description":"Affected versions of `parsejson` are vulnerable to a regular expression denial of service when parsing untrusted user input.\n\n\n## Recommendation\n\nThe `parsejson` package has not been functionally updated since it was initially released.\n\nAdditionally, it provides functionality which is natively included in Node.js, and therefore the native `JSON.parse()` should be used, for both performance and security reasons.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-07-24T20:11:13.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-16113","https://github.com/get/parsejson/issues/4","https://github.com/advisories/GHSA-q75g-2496-mxpp","https://www.npmjs.com/advisories/528"],"source_kind":"github","identifiers":["GHSA-q75g-2496-mxpp","CVE-2017-16113"],"repository_url":"https://github.com/get/parsejson","blast_radius":0.0,"created_at":"2022-12-21T16:13:14.153Z","updated_at":"2026-04-17T12:11:09.623Z","epss_percentage":0.00303,"epss_percentile":0.53508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NWctMjQ5Ni1teHBw","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NWctMjQ5Ni1teHBw","packages":[{"ecosystem":"npm","package_name":"parsejson","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.0.3"}],"purl":"pkg:npm/parsejson","statistics":{"dependent_packages_count":55,"dependent_repos_count":149707,"downloads":1519784,"downloads_period":"last-month"},"affected_versions":["0.0.1","0.0.2","0.0.3"],"unaffected_versions":[]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NWctMjQ5Ni1teHBw/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/parsejson","docker_dependents_count":597,"docker_downloads_count":127373177,"usage_url":"https://repos.ecosyste.ms/usage/npm/parsejson","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/parsejson/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T00:56:27.888Z","issues_count":2,"pull_requests_count":3,"avg_time_to_close_issue":51769228.5,"avg_time_to_close_pull_request":58005200.666666664,"issues_closed_count":2,"pull_requests_closed_count":3,"pull_request_authors_count":3,"issue_authors_count":2,"avg_comments_per_issue":9.0,"avg_comments_per_pull_request":0.3333333333333333,"merged_pull_requests_count":1,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/galkn%2Fparsejson/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/parsejson/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/parsejson/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/parsejson/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/parsejson/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/parsejson/codemeta","maintainers":[{"uuid":"gal","login":"gal","name":null,"email":"koren@mit.edu","url":null,"packages_count":4,"html_url":"https://www.npmjs.com/~gal","role":null,"created_at":"2022-11-20T02:04:01.200Z","updated_at":"2022-11-20T02:04:01.200Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/gal/packages"}]}