Out-of-bounds Read in base64-url · GHSA-j4mr-9xw3-c9jx · GitHub Advisory Database · GitHub

Out-of-bounds Read in base64-url

High severity GitHub Reviewed Published May 31, 2019 to the GitHub Advisory Database • Updated Jan 9, 2023

Package

base64-url (npm)

Affected versions

< 2.0.0

Patched versions

2.0.0

Description

Versions of base64-url before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input.

Recommendation

Update to version 2.0.0 or later.

References

Reviewed May 31, 2019

Published to the GitHub Advisory Database May 31, 2019

Last updated Jan 9, 2023