~ / search / GHSA-32j9-6qqm-mq9g

GHSA-32j9-6qqm-mq9g

Unhandled case in node-lmdb

Source: GitHub Advisory Database (reviewed) High CVE-2022-21164

Packages

EcosystemPackageAffectedFixed in
npm node-lmdb < 0.9.7 0.9.7

Details

As written in the advisory (Markdown source, shown as plain text).

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service (DoS) when defining a non-invokable `ToString` value, which will cause a crash during type check.

References

External links from the advisory. They lead to third-party sites.