Homepage
About Snyk

node-stringbuilder@2.2.7 vulnerabilities

An easy and fast in-memory string builder for Node.js.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the node-stringbuilder package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Out-of-bounds Read

node-stringbuilder is an An easy and fast in-memory string builder for Node.js.

Affected versions of this package are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return previously allocated memory, for example, by providing negative indexes, leading to an Information Disclosure.

How to fix Out-of-bounds Read?

There is no fixed version for node-stringbuilder.

*
Go back to all versions of this package