CyberSecBulletin

Node-stringbuilder vulnerabilities

We track 1 vulnerability in Node-stringbuilder products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2024.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Node-stringbuilder vulnerabilities

  • 9.1 Critical severity

    node-stringbuilder: Out-of-bounds Read

    CVE-2024-21524Node-stringbuilder

    All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return prev