GHSA-32j9-6qqm-mq9g

ghsaUSosv

Unhandled case in node-lmdb

view advisory published 2022-03-17Licence: CC-BY-4.0

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service (DoS) when defining a non-invokable `ToString` value, which will cause a crash during type check.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-21164US	high7.5	1.32% (71st)	—	2022-03-16
The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.

references

External citations — patches, advisories, analysis.

https://github.com/Venemo/node-lmdbPACKAGE
https://github.com/Venemo/node-lmdb/commit/97760104c0fd311206b88aecd91fa1f59fe2b85aWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-21164ADVISORY
https://snyk.io/vuln/SNYK-JS-NODELMDB-2400723WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan