GHSA-hmqg-p8f8-3qrwMediumCVSS 5.3

Out-of-bounds Read in fast-string-search

Published
June 18, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

📋 Description

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.

🎯 Affected products1

  • npm/fast-string-search:<= 1.4.3

🔗 References (4)