31 matches found
devalue: `stringify`/`uneval` serialize shared memory
Impact stringify and uneval serialize a typed array by emitting its backing ArrayBuffer, not just the view. In the case of a Node Buffer object, the backing buffer is a process-wide shared pool, meaning unrelated memory can be serialized into a response that is then sent to the client. For a Node...
7.5CVSS5.9AI score0.00725EPSS
SaveExploits0References5Affected Software1
20