Homepage

node-stringbuilder@2.2.3 vulnerabilities

An easy and fast in-memory string builder for Node.js.

  • latest version

    2.2.7

  • first published

    7 years ago

  • latest version published

    1 years ago

  • licenses detected

  • View node-stringbuilder package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the node-stringbuilder package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Out-of-bounds Read

    node-stringbuilder is an An easy and fast in-memory string builder for Node.js.

    Affected versions of this package are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return previously allocated memory, for example, by providing negative indexes, leading to an Information Disclosure.

    How to fix Out-of-bounds Read?

    There is no fixed version for node-stringbuilder.

    *
    Go back to all versions of this package