CVE-2018-21270
1 advisory.
npm/stringstream CVE-2018-21270: medium, EPSS 3.68%
Out-of-bounds Read in stringstream
Action: Upgrade stringstream to 0.0.6 or later.
npm i stringstream@0.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.6 | - |
Fixed versions
| 0.0.6 |
Sources
- osv: GHSA-mf6x-7mm4-x2g7
- https://hackerone.com/reports/321670
- https://github.com/mhart/StringStream/blob/v0.0.5/stringstream.js#L32
- https://www.npmjs.com/advisories/664
CVE-2018-21270 · published · modified · JSON