CVE-2018-21270

6.5

MEDIUMCVSS v3

Published

December 3, 2020

CVSS v2

5.8 MEDIUM

Affected

10 projects

Assigned by

MITRE

Severity scale

010

Description

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

< 0.0.6NVD

externs/nodejs

GitHubThe Externs For Node.JS.

< 0.0.6NVD

mhart/StringStream

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Encode and decode streams into string streams in node.js

NVD

@depack/nodejs

NPMMocks Of Built-In Node.JS Modules To Use For Compilation.

< 0.0.6NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

< 0.0.6NVD

dpck/nodejs

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

< 0.0.6NVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

< 0.0.6NVD

nodejs

NPM

< 0.0.6NVD

node.js

NPMsecurity holding package

< 0.0.6NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

< 0.0.6NVD

Security Advisories

CVE-2018-21270

Description

More on this CVE