4q (>=0.5.0 <=0.6.0), @aibulat/fs (>=0.0.2 <=0.0.7) +101 more potentially affected by CVE-2022-21211 via posix (>=0.0.10 <=4.2.0)

posix NPM version =0.0.10, =0.5.0, =0.0.2, =0.0.1, =1.0.11, =5.5.0, =1.0.0, =1.0.0, =1.0.0, =0.1.3-beta.0, =1.161.831, =0.0.0, =0.2.14, =1.13.0, =0.1.6, =0.1.7 and more Source cves: CVE-2022-21211 Source advisory: OSV:GHSA-27MX-GCHC-6XJP...

CVE-2022-21211

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...

CVE-2022-21211 Denial of Service (DoS)

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...

CVE-2022-21211

CVE-2022-21211 affects the npm package posix (all versions) and is caused by the toString method not being invokable, causing a crash (DoS) when the code falls back to a 0x0 value. The vulnerability has public discussion and proof-of-concept material (e.g., a Snyk overview with a PoC) and multipl...

4q (>=0.5.0 <=0.6.0), @aibulat/fs (>=0.0.2 <=0.0.7) +101 more potentially affected by CVE-2022-21211 via posix (>=0.0.10 <=4.2.0)

posix NPM version =0.0.10, =0.5.0, =0.0.2, =0.0.1, =1.0.11, =5.5.0, =1.0.0, =1.0.0, =1.0.0, =0.1.3-beta.0, =1.161.831, =0.0.0, =0.2.14, =1.13.0, =0.1.6, =0.1.7 and more Source cves: CVE-2022-21211 Source advisory: SNYK:JS-POSIX-2400719...