justmoon/node-bignum

justmoon/node-bignum

Releases20
Frequency4 months 2 weeks
Last Release
Stars418
Big integers for Node.js using OpenSSL

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH5 MEDIUM

All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.