GitHub Advisoryadvisory · npm

GHSA-xm7f-x4wx-wmgv Out-of-bounds Read in byte

MEDIUM Published 2019-06-04 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
byte
Severity
Moderate
Weaknesses
CWE-125
Reviewed
2019-06-04

Affected packages

• npm byte: < 1.4.1 → fixed in 1.4.1

Description

Versions of `byte` before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length Recommendation Update to version 1.4.1 or later.

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References