Lucene search
+L

31 matches found

Github Security Blog
Github Security Blog
•added 2026/10/01 3:18 p.m.•3 views

devalue: `stringify`/`uneval` serialize shared memory

Impact stringify and uneval serialize a typed array by emitting its backing ArrayBuffer, not just the view. In the case of a Node Buffer object, the backing buffer is a process-wide shared pool, meaning unrelated memory can be serialized into a response that is then sent to the client. For a Node...

7.5CVSS5.9AI score0.00725EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder