CVE-2016-2537

CVE-2016-2537 describes a denial-of-service vulnerability in the is-my-json-valid package for Node.js, affecting versions prior to 2.12.4. The flaw stems from an incorrect regular expression in the exports['utc-millisec'] component. This vulnerability carries a CVSS v3.0 score of 7.5 (High), indicating that an unauthenticated remote attacker can exploit it with low complexity to cause a blocked event loop, leading to a denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.