8 matches found
GHSA-J22F-VQ7H-C4QM devalue: `stringify`/`uneval` serialize shared memory
Impact stringify and uneval serialize a typed array by emitting its backing ArrayBuffer, not just the view. In the case of a Node Buffer object, the backing buffer is a process-wide shared pool, meaning unrelated memory can be serialized into a response that is then sent to the client. For a Node...
7.5CVSS5.9AI score0.00725EPSS
SaveExploits0References5
20