{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.5"}],"component":"bigint-buffer","cve_ids":["CVE-2025-3194"],"ecosystem":"npm","epss":0.00723,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3gc7-fjrx-p6mg","id":"tcs_01M5KEXA0EAV958Y3ZYBY0CJQF","modified_at":"2025-04-04T19:27:20.290375Z","published_at":"2025-04-04T06:34:22Z","references":["https://osv.dev/vulnerability/GHSA-3gc7-fjrx-p6mg","https://nvd.nist.gov/vuln/detail/CVE-2025-3194","https://github.com/no2chem/bigint-buffer","https://github.com/no2chem/bigint-buffer/blob/master/src/index.ts#L25","https://security.snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597","https://www.usenix.org/system/files/sec23fall-prepub-262_staicu.pdf"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3gc7-fjrx-p6mg","url":"https://osv.dev/vulnerability/GHSA-3gc7-fjrx-p6mg"}],"summary":"bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function"}