EUVD-2022-2705

Malicious code in bioql PyPI...

@aeternity/aepp-sdk (=0.25.0-0.1.0), @berrywallet/core (>=0.1.0 <=0.2.1) +182 more potentially affected by CVE-2022-25324 via bignum (>=0.10.2 <=0.13.1)

bignum NPM version =0.10.2, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.0.0, =1.0.1 and more Source cves: CVE-2022-25324 Source advisory: OSV:GHSA-6429-3G3W-6MW5...

GHSA-6429-3G3W-6MW5 Uncaught Exception in bignum

All versions of the npm package bignum are vulnerable to Denial of Service DoS due to a type-check exception in V8. When verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks...

CVE-2022-25324

All versions of package bignum are vulnerable to Denial of Service DoS due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks...

1664 (>=0.2.1 <=0.2.3), @aeternity/aepp-sdk (=0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.10.2 <=0.9.3)

bignum NPM version =0.10.2, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...