GitHub Advisoryadvisory · npm

GHSA-27mx-gchc-6xjp Unhandled crash in npm posix

HIGH Published 2022-06-11 Modified 2022-06-17 Official page ↗
Aliases
CVE-2022-21211
Ecosystem
npm
Packages
posix
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-252
Reviewed
2022-06-17

Affected packages

• npm posix: <= 4.2.0 (no fix yet)

Description

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check.

Related

Alias · CVE (1)

  • CVE-2022-21211 This affects all versions of package posix. vulnerability

Weakness · CWE (1)

  • CWE-252 Unchecked Return Value weakness

References