bigint-buffer-safe

bigint-buffer-safe 安全、纯 JS 的 bigint-buffer 替代品。修复了 CVE-2025-3194（CVSS 7.5，缓冲区溢出/拒绝服务）。 零依赖。无原生绑定。适用于 Node.js 和浏览器。 为什么存在？ 原始 bigint-buffer 包存在高危缓冲区溢出漏洞 （CVE-2025-3194，CVSS 7.5），当传递 toBigIntLEnull 或其他无效输入时会崩溃进程。维护者自 2019 年 10 月以来未发布更新。依赖它的 @solana/buffer-layout-utils 包已于 2025 年 1 月归档。上游修复无望。...

ROOT-APP-NPM-CVE-2025-3194 CVE-2025-3194 in @rootio/bigint-buffer - Patched by Root

Root has patched CVE-2025-3194 in the @rootio/bigint-buffer package for Root:npm. Multiple fixed versions available...

EUVD-2025-9701

Malicious code in bioql PyPI...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

0xppl-solana-portfolio (1.0.0), 0xuath-sdk-react (>=0.0.2, <=0.0.23) +6438 more potentially affected by CVE-2025-3194 via bigint-buffer (1.1.5)

bigint-buffer NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio 1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =0.0.77, =0.2.0, =0.1.1...

bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

GHSA-3GC7-FJRX-P6MG bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...

CVE-2025-3194

CVE-2025-3194 concerns the npm package bigint-buffer. The vulnerability affects versions starting at 0.0.0 and later, where the function toBigIntLE() contains a buffer overflow that can cause the application to crash. Multiple sources consistently describe the root cause as improper bounds checki...

bigint-buffer 安全漏洞

bigint-buffer is a buffer utility program by the individual developer Michael Wei. A security vulnerability exists in bigint-buffer that stems from a buffer overflow in the toBigIntLE function, which could cause the application to crash...

0xppl-solana-portfolio (1.0.0), 0xuath-sdk-react (>=0.0.2, <=0.0.23) +6438 more potentially affected by CVE-2025-3194 via bigint-buffer (1.1.5)

bigint-buffer NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio 1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =0.0.77, =0.2.0, =0.1.1...

Buffer Overflow

Overview bigint-buffer is a Node utility that converts TC39 Proposed BigInts to and from buffers Affected versions of this package are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application. PoC js let be = require'bigint-buffer';...