npm/detect-character-encoding CVE-2021-39176: high 7.5, EPSS 1.89%

Missing Release of Memory after Effective Lifetime in detect-character-encoding

Action: Upgrade detect-character-encoding to 0.3.1 or later.

npm i detect-character-encoding@0.3.1

Affected

Fixed versions

Sources

• osv: GHSA-5rwj-j5m3-3chj
• https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj
• https://nvd.nist.gov/vuln/detail/CVE-2021-39176
• https://github.com/sonicdoe/detect-character-encoding/pull/6
• https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588
• https://github.com/sonicdoe/detect-character-encoding
• https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1

CVE-2021-39176 · published 2021-09-01T18:25:16Z · modified 2026-07-08T06:28:33.588838025Z · JSON