npm/opencc CVE-2025-15536: medium 5.3, EPSS 0.25%
Open Chinese Convert has Out-of-bounds Write
Action: Upgrade opencc to 1.2.0 or later.
npm i opencc@1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-5pr6-crvp-2j9f
- https://nvd.nist.gov/vuln/detail/CVE-2025-15536
- https://github.com/BYVoid/OpenCC/issues/997
- https://github.com/BYVoid/OpenCC/pull/1005
- https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec
- https://github.com/BYVoid/OpenCC
- https://github.com/oneafter/1222/blob/main/repro
- https://vuldb.com/?ctiid.341708
- https://vuldb.com/?id.341708
- https://vuldb.com/?submit.733347
CVE-2025-15536 · published · modified · JSON