GHSA-27mx-gchc-6xjp

Unhandled crash in npm posix

Source: GitHub Advisory Database (reviewed) High CVE-2022-21211

Packages

Ecosystem	Package	Affected	Fixed in
npm	posix	<= 4.2.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-21211 advisory
https://github.com/ohmu/node-posix package
https://snyk.io/vuln/SNYK-JS-POSIX-2400719 web