3 matches found
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop through the customRandom function in the customRandom implementation. An attacker can hang the calling thread by supplying a size of 0 to customRandom, which causes its ID generation loop to never reach a terminating...
8.2CVSS5.5AI score0.00319EPSS
SaveExploits0References2
20