259 matches found
bigint-buffer-safe
bigint-buffer-safe Safe, pure-JS drop-in replacement for bigint-buffer. Fixes CVE-2025-3194 CVSS 7.5, buffer overflow / DoS. Zero dependencies. No native bindings. Works in Node.js and browsers. Why does this exist? The original bigint-buffer package has a high-severity buffer overflow...
bigint-buffer-js
bigint-buffer-js Drop-in replacement for [email protected] without the native binding. bigint-buffer ≤ 1.1.5 has a buffer overflow in the native toBigIntLE CVE-2025-3194 / GHSA-3gc7-fjrx-p6mg and no fixed version has been published. It is pulled in transitively by @solana/buffer-layout-utils...
EUVD-2026-107556
toml-node: Uncontrolled resource consumption CPU DoS via unbounded-length integer literals in toml.parse...
Linux Distros Unpatched Vulnerability : CVE-2026-114144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse passes unbounded hexadecimal, octal, binary, and decimal digit sequences from...
CVE-2026-114144
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt before reduceInteger in lib/compiler.js checks whether the resulting value fits the TOML 64-bit integer range...
CVE-2026-114144 toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt before reduceInteger in lib/compiler.js checks whether the resulting value fits the TOML 64-bit integer range...
CVE-2026-114144
The toml-node TOML parser for Node.js and the browser is vulnerable to uncontrolled resource consumption (CPU DoS) in versions prior to 5.0.1 . The toml.parse() function passes unbounded hexadecimal, octal, binary, and decimal sequences from lib/parser.js to BigInt() before the reduceInteger() fu...
CVE-2026-114144 toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt before reduceInteger in lib/compiler.js checks whether the resulting value fits the TOML 64-bit integer range...
PT-2026-120813
Name of the Vulnerable Software and Affected Versions toml-node versions prior to 5.0.1 Description The toml.parse function passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt before the reduceInteger function in lib/compiler.js verifies if the...
Malicious Package
Overview json-bigint-rs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-17312 Malicious code in json-bigint-rs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b71b917a0504deb87a597d9d07527179c2d6bb9ec1f836caa34d6145aa043 On require, index.js instantiates the shipped json-bigint-rs.wasm module and, for imports declared under the 'wasm:js/string-constants' module...
Malicious code in json-bigint-rs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b71b917a0504deb87a597d9d07527179c2d6bb9ec1f836caa34d6145aa043 On require, index.js instantiates the shipped json-bigint-rs.wasm module and, for imports declared under the 'wasm:js/string-constants' module...
CLSA-2026-1790541837 TuxCare security update for json-bigint (1 CVE)
TuxCare rebuilt json-bigint to address 1 CVE. Fixed in 0.3.1-tuxcare.1...
PT-2026-107728
TuxCare rebuilt json-bigint to address 1 CVE. Fixed in 0.3.1-tuxcare.1...
Astra Linux – Vulnerability in Mariadb 10.3
In MariaDB versions up to 10.5.9, attackers can exploit a vulnerability that triggers a convertconsttoint use-after-free when the BIGINT data type is used...
ANT-2026-MAPZGQDY · jsoncons · Heap-buffer-overflow
heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-MAPZGQDY: Heap-buffer-overflow in bigint.hpp:260 Duri...
A `BigInt` division panics, and two neighbouring operations answer wrongly in silence
viperjs is a JavaScript engine intended to run untrusted script inside a host application, so script text is data rather than a trusted caller and a panic reachable from script is a denial of service in the embedder's process. A divisor whose magnitude lands exactly on the engine's internal limb...
RUSTSEC-2026-0236 A `BigInt` division panics, and two neighbouring operations answer wrongly in silence
viperjs is a JavaScript engine intended to run untrusted script inside a host application, so script text is data rather than a trusted caller and a panic reachable from script is a denial of service in the embedder's process. A divisor whose magnitude lands exactly on the engine's internal limb...