Unchecked Input for Loop Condition

[AlexMiller998s]

Risk Rating: Medium

Category Security: Misconfiguration

Description: The application performs some repetitive task in a loop, and defines the number of times to perform the loop according to user input. A very high value could cause the application to get stuck in the loop and to be unable to continue to other operations.

Impact: An attacker could input a very high value, potentially causing a denial of service (DoS).

Remediation:

Recommendation · Ideally, don’t base a loop on user-provided data. If it is necessary to do so, the user input must be first validated and its range should be limited.

Findings:
The following screenshot contains the finding related to this file
https://github.com/videojs/mux.js/blob/v7.1.0/lib/m2ts/metadata-stream.js#L187