Product
PapaParse versions before 5.7.1 are susceptible to a denial of service vulnerability where maliciously crafted CSV input triggers quadratic CPU consumption, leading to resource exhaustion.