Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-3767

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cx8m-8xmx-q8v3

Denial of Service in memjs Versions of `memjs` prior to 1.2.2 are vulnerable to Denial of Service (DoS). The package fails to sanitize the `value` option passed to the Buffer constructor, which may allow attackers to pass large values exhausting system resources. ## Recommendation Upgrade to version 1.2.2 or later.

gitlab/npm/memjs/CVE-2018-3767

Uncontrolled Resource Consumption `memjs` allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.