EUVD-2022-6154

Malicious code in bioql PyPI...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

@discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...

GHSA-43WQ-XRCM-3VGR @discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +151 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.8.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-21521 Source advisory: OSV:GHSA-43WQ-XRCM-3VGR...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

CVE-2024-21521

CVE-2024-21521 affects the @discordjs/opus package (native bindings to libopus). The vulnerability arises when an input object with a toString property is passed to several functions, potentially causing a system crash (DoS). If exploiting details are provided, they would be consistent with a Den...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

CVE-2024-21521: Uncontrolled Resource Consumption

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

PT-2024-18935 · Unknown · @Discordjs/Opus

Name of the Vulnerable Software and Affected Versions: @discordjs/opus versions all Description: The issue is related to a Denial of Service DoS condition that can occur when an input object with a toString property is provided to several different functions. This can lead to a system or process...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +195 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.9.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.0, =2.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2024-21521 Source advisory: SNYK:JS-DISCORDJSOPUS-6370643...

GHSA-RVGF-69J7-XH78 Uncontrolled Resource Consumption in @discordjs/opus

Improperly handled errors in @discordjs/opus cause hard crashes instead of returning the error to user land. All versions of package @discordjs/opus = 0.7.0 are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads t...

Uncontrolled Resource Consumption in @discordjs/opus

Improperly handled errors in @discordjs/opus cause hard crashes instead of returning the error to user land. All versions of package @discordjs/opus = 0.7.0 are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads t...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: OSV:GHSA-RVGF-69J7-XH78...

ALPINE-CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

CVE-2022-25345

CVE-2022-25345 affects the npm package @discordjs/opus. The root cause is improper error handling when encoding with an encoder that has zero channels or a non-initialized buffer, causing a Denial of Service via a hard crash. Exploitation details are not provided in the documents. Mitigation note...