GitHub Advisoryadvisory · npm

GHSA-j4mr-9xw3-c9jx Out-of-bounds Read in base64-url

HIGH Published 2019-05-31 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
base64-url
Severity
High
Weaknesses
CWE-125
Reviewed
2019-05-31

Affected packages

• npm base64-url: < 2.0.0 → fixed in 2.0.0

Description

Versions of `base64-url` before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input. Recommendation Update to version 2.0.0 or later.

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References