CVE-2021-39176
1 advisory.
npm/detect-character-encoding CVE-2021-39176: high 7.5
Missing Release of Memory after Effective Lifetime in detect-character-encoding
Action: Upgrade detect-character-encoding to 0.3.1 or later.
npm i detect-character-encoding@0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: GHSA-5rwj-j5m3-3chj
- https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj
- https://nvd.nist.gov/vuln/detail/CVE-2021-39176
- https://github.com/sonicdoe/detect-character-encoding/pull/6
- https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588
- https://github.com/sonicdoe/detect-character-encoding
- https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1
CVE-2021-39176 · published · modified · JSON