422.json

{
  "id": 422,
  "title": "Out-of-bounds Read",
  "overview": "`stringstream` allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below",
  "created_at": "2018-03-03",
  "updated_at": "2018-05-11",
  "publish_date": "2018-05-11",
  "author": {
    "name": "Сковорода Никита Андреевич",
    "website": "https://github.com/ChALkeR",
    "username": null
  },
  "module_name": "stringstream",
  "cves": [],
  "vulnerable_versions": "<=0.0.5",
  "patched_versions": ">=0.0.6",
  "recommendation": "Update stringstream module to 0.0.6 or higher.",
  "references": [
    "https://hackerone.com/reports/321670",
    "https://github.com/mhart/StringStream/blob/v0.0.5/stringstream.js#L32"
  ],
  "cvss_vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
  "cvss_score": 5.2,
  "coordinating_vendor": null
}