cumulative-distribution-function@1.0.0 vulnerabilities

cumulative-distribution-function is a create empirical cumulative distribution function from array of values

Affected versions of this package are vulnerable to Denial of Service (DoS). In the case of a NodeJS server-app using this library to act on invalid non-numeric data, the NodeJS server may crash. This may affect other users of this server and/or require the server to be rebooted for proper operation. In the case of a browser app using this library to act on invalid non-numeric data, that browser may crash or lock up. A flaw enabling an infinite-loop was discovered in the code for evaluating the cumulative-distribution-function of input data. Although the documentation explains that numeric data is required, some users may confuse an array of strings like ["1","2","3","4","5"] for numeric data [1,2,3,4,5] when it is in fact string data. An infinite loop is possible when the cumulative-distribution-function is evaluated for a given point when the input data is string data rather than type number.

Upgrade cumulative-distribution-function to version 2.0.0 or higher.