| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | < 0.0.6 | 0.0.6 |
| stringstream | < 0.0.6 | 0.0.6 |
All versions of stringstream are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below.
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module if user input is being passed in to stringstream.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free