Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-g74r-ffvr-5q9f

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-g74r-ffvr-5q9f

Memory Exposure in concat-stream Versions of `concat-stream` before 1.5.2 are vulnerable to memory exposure if userp provided input is passed into `write()` Versions <1.3.0 are not affected due to not using unguarded Buffer constructor. ## Recommendation Update to version 1.5.2, 1.4.11, 1.3.2 or later. If you are unable to update make sure user provided input into the `write()` function is not a number.

gitlab/npm/concat-stream/GMS-2019-18

Memory Exposure in concat-stream Versions of `concat-stream` is vulnerable to memory exposure if userp provided input is passed into `write()` are not affected due to not using unguarded Buffer constructor. Update to or later. If you are unable to update make sure user provided input into the `write()` function is not a number.