Описание
Out-of-Bounds read in stringstream
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).
WITHDRAWN
This is a duplicate of GHSA-mf6x-7mm4-x2g7
Пакеты
Наименование
stringstream
npm
Затронутые версииВерсия исправления
< 0.0.6
0.0.6
6.5 Medium
CVSS3
Дефекты
CWE-125
6.5 Medium
CVSS3
Дефекты
CWE-125