CyberSecBulletin

@discordjs/opus vulnerabilities

We track 2 vulnerabilities in @discordjs/opus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest @discordjs/opus vulnerabilities

  • 7.5 High severity

    @discordjs/opus: Uncontrolled Resource Consumption

    CVE-2024-21521@discordjs/opus

    All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash.

  • 7.5 High severity

    @discordjs/opus: Use of Uninitialized Resource

    CVE-2022-25345@discordjs/opusEPSS 1.4%

    All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash.