tocsin

Debian/node-bl: medium 6.5

A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become

Action: Upgrade node-bl to 4.0.3-1 or later.

Affected

introducedfixedlast affected
04.0.3-1-

Fixed versions

4.0.3-1

Sources

published · modified · JSON