CVE-2022-25872
1 advisory.
npm/fast-string-search CVE-2022-25872: medium 5.3
Out-of-bounds Read in fast-string-search
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hmqg-p8f8-3qrw
- https://nvd.nist.gov/vuln/detail/CVE-2022-25872
- https://github.com/magiclen/node-fast-string-search
- https://github.com/magiclen/node-fast-string-search/blob/c8dd9fc966abc80b327f509e63360f59e0de9fb5/src/fast-string-search.c%23L192
- https://snyk.io/vuln/SNYK-JS-FASTSTRINGSEARCH-2392368
CVE-2022-25872 · published · modified · JSON