GitHub Advisoryadvisory · npm

GHSA-9r3m-mhfm-39cm Incorrect Calculation in bigint-money

LOW Published 2020-09-11 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
bigint-money
Severity
Low
Weaknesses
CWE-682
Reviewed
2020-08-31

Affected packages

• npm bigint-money: < 0.6.2 → fixed in 0.6.2

Description

Versions of `bigint-money` prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems. Recommendation Upgrade to version 0.6.2 or later.

Related

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

References