Lucene search

Improper Handling of Unexpected Data Type in ced

🗓️ 23 Aug 2021 19:28:42Reported by GitHub Advisory DatabaseType

Improper Handling of Unexpected Data Type in ced. Node.js process crashes due to passing data types other than `Buffer` in ced v0.1.0. Patched in [ced v1.0.0](https://github.com/sonicdoe/ced/releases/tag/v1.0.0). Upgrade without breaking changes. CVSS Base Score: 7.5 (High)

Reporter	Title	Published	Views	Family All 6
Prion	Design/Logic Flaw	17 Aug 202123:15	–	prion
NVD	CVE-2021-39131	17 Aug 202123:15	–	nvd
CVE	CVE-2021-39131	17 Aug 202123:15	–	cve
OSV	Improper Handling of Unexpected Data Type in ced	23 Aug 202119:42	–	osv
OSV	CVE-2021-39131	17 Aug 202123:15	–	osv
Cvelist	CVE-2021-39131 Improper Handling of Unexpected Data Type in ced	17 Aug 202119:55	–	cvelist

Vulners

Node

-cedRange<1.0.0

Source	Link
github	www.github.com/sonicdoe/ced/security/advisories/GHSA-27wq-qx3q-fxm9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39131
github	www.github.com/sonicdoe/ced/commit/a4d9f10b6bf1cd468d1a5b9a283cdf437f8bb7b3
github	www.github.com/sonicdoe/ced/releases/tag/v1.0.0
github	www.github.com/advisories/GHSA-27wq-qx3q-fxm9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Aug 2021 19:42Current

7.3High risk

Vulners AI Score7.3

CVSS25

CVSS37.5

EPSS0.002

CWE-241