GHSA-frp9-2v6r-gj97HighCVSS 7.5

muhammara and hummus vulnerable to null pointer dereference on bad response object

Published
November 1, 2022
Last Modified
January 31, 2023

🔗 CVE IDs covered (1)

CVE-2022-25885 →

📋 Description

The package muhammara before 2.6.0 and the package hummus before 1.0.111 are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

🎯 Affected products2

  • npm/muhammara:< 2.6.0
  • npm/hummus:>= 1.0.0, <= 1.0.110

🔗 References (8)