GHSA-mf6x-7mm4-x2g7
Out-of-bounds Read in stringstream
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | stringstream | < 0.0.6 | 0.0.6 |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of `stringstream` are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below.
## Recommendation
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module if user input is being passed in to `stringstream`.
References
External links from the advisory. They lead to third-party sites.