2fa (0.0.1), @blizzardbots/guild-emblem-generator (1.3.0) +336 more potentially affected by CVE-2020-8215 via canvas (>=1.0.0, <=1.6.10)

canvas NPM version =1.0.0, =0.0.21, =1.0.1-1, =0.99.5-beta.0, =1.2.0, =0.0.1, =1.1.0, =1.0.0, =0.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2020-8215 Source advisory: OSV:GHSA-73RG-X683-M3QW...

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

CVE-2020-8215

The CVE-2020-8215 entry concerns a buffer overflow in the canvas library. Affected component: canvas (versions