Lucene search
+L

41 matches found

Hacker One
Hacker One
added 2018/03/03 11:51 p.m.19 views

Node.js third-party modules: `base64-url` below 2.0 allocates uninitialized Buffers when number is passed in input

I would like to report an uninitialized Buffer allocation issue in base64-url. It allows to extract sensitive data from uninitialized memory or to cause a DoS by passing in a large number, in setups where typed user input can be passed e.g. from JSON. Module module name: base64-url version: 1.3.3...

1AI score
SaveExploits0
Rows per page
Query Builder