github_osv/GHSA-c2gp-86p4-5935
Use-After-Free in puppeteer
Versions of `puppeteer` prior to 1.13.0 are vulnerable to the Use-After-Free vulnerability in Chromium (CVE-2019-5786). The Chromium FileReader API is vulnerable to Use-After-Free which may lead to Remote Code Execution.
## Recommendation
Upgrade to version 1.13.0 or later.
gitlab/npm/puppeteer/CVE-2019-5786
Use After Free
Object lifetime issue in Blink in Google Chrome allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page.