Описание
Uncaught Exception in bignum
All versions of the npm package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8. When verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.
Пакеты
Наименование
bignum
npm
Затронутые версииВерсия исправления
<= 0.13.1
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
почти 4 года назад
All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.