Node.js third-party modules: `stringstream` allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below
I would like to report n uninitialized Buffer allocation issue in stringstream. It allows to extract sensitive data from uninitialized memory or to cause a DoS by passing in a large number, in setups where typed user input can be passed to the stream e.g. from JSON, on Node.js 4.x and lower. Modu...