Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/12 12:31 a.m.16 views

yauzl contains an off-by-one error

yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...

6.9CVSS6AI score0.00485EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder