magiclen/node-fast-string-search

magiclen/node-fast-string-search

GitHubGitHub
GitHubgithub.com
Releases8
Frequency10 months 3 weeks
Last Release
Stars21
Fast search substrings in a string by using N-API and boyer-moore-magiclen.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-25872↗
5.3 MEDIUM5 MEDIUM

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.