SUSE CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

@applicaster/zapp-pipes-dev-kit (1.2.2), @concordant/c-service (>=1.1.2, <=1.1.4) +78 more potentially affected by CVE-2018-3745 via atob (>=2.0.0, <=2.0.3)

atob NPM version =2.0.0, =1.1.2, =6.3.4, =6.5.2, =1.1.1, =6.4.2, =6.4.2, =2.3.2, =8.8.7, =8.9.6 and more Source cves: CVE-2018-3745 Source advisory: OSV:GHSA-8W4H-3CM3-2PM2...

CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

CVE-2018-3745

CVE-2018-3745 describes an information disclosure/DoS risk in the atob Node.js module (versions 2.0.3 and earlier) caused by allocating uninitialized Buffers when a number is provided as input on Node.js 4.x and earlier. The vulnerability affects the atob module itself and is due to uninitialized...