Skip to content
OpenAdvisories

Package · npm

bignum

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical —
    GHSA-7cgc-fjv4-52x6

    Malware in pre-build binaries of bignum

    ### Impact bignum releases from v0.12.2 to v0.13.0 (inclusive) used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party wh…

    bignum npm
  • High 7.5
    CVE-2022-25324

    Denial of Service (DoS)

    All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.

    bignum npm