brianloveswords/base64url · Security
Out-of-bounds Read in base64url
- GHSA ID
- GHSA-rvg8-pwq2-xj7q
- Severity
- medium
- Published
- Updated
Description
Versions of base64url before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.
Recommendation
Update to version 3.0.0 or later.
CWEs
- CWE-125 · Out-of-bounds Read