GitHub Advisoryadvisory · npm

GHSA-2xv3-h762-ccxv Out-of-bounds Read in concat-with-sourcemaps

MEDIUM Published 2019-05-29 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
concat-with-sourcemaps
Severity
Moderate
Weaknesses
CWE-125
Reviewed
2019-05-29

Affected packages

• npm concat-with-sourcemaps: >= 1.0.0, < 1.0.6 → fixed in 1.0.6

Description

Versions of `concat-with-sourcemaps` before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator. Recommendation Update to version 1.0.6 or later.

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References