npm/kurwov CVE-2024-34075: medium 6.2, EPSS 0.30%
kurwov vulnerable to Denial of Service due to improper data sanitization
Action: Upgrade kurwov to 3.2.5 or later.
npm i kurwov@3.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 3.2.5 | - |
Fixed versions
| 3.2.5 |
Sources
- osv: GHSA-hfrv-h3q8-9jpr
- https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3q8-9jpr
- https://nvd.nist.gov/vuln/detail/CVE-2024-34075
- https://github.com/xiboon/kurwov/commit/85d63e652594f121d6656177d7a3c0d823c976c9
- https://github.com/xiboon/kurwov
- https://github.com/xiboon/kurwov/blob/0d58dfa42135ab40e830e92622857282f980ca89/src/MarkovData.ts#L38-L44
CVE-2024-34075 · published · modified · JSON