Skip to content
OpenAdvisories

Package · Hackage

base

2 known vulnerabilities.

2 results · Feed

  • Unscored —

    fromIntegral: conversion error

    # `fromIntegral`: conversion error `fromIntegral` may result in coercion errors when used with optimization flags `-O1` or `-O2` in the following situation: - Converting negative `Int` to `Natural` does not throw an arithmetic underflow error - Converting lar…

  • Unscored —

    readFloat: memory exhaustion with large exponent

    # `readFloat`: memory exhaustion with large exponent `Numeric.readFloat` takes time and memory linear in the size of the number _denoted_ by the input string. In particular, processing a number expressed in scientific notation with a very large exponent could…