| Package | Affected versions | Patched versions |
|---|---|---|
| bl | ≥ 1.0.0, < 1.0.1< 0.9.5 | 1.0.10.9.5 |
Versions of bl before 0.9.5 and 1.0.1 are vulnerable to memory exposure.
bl.append(number) in the affected bl versions passes a number to Buffer constructor, appending a chunk of uninitialized memory
Update to version 0.9.5, 1.0.1 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free