Skip to content
OpenAdvisories

Package · npm

fast-string-search

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2022-25872

    Out-of-bounds Read

    All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.

    fast-string-search npm
  • High 7.5
    CVE-2022-22138

    Denial of Service (DoS)

    All versions of package fast-string-search are vulnerable to Denial of Service (DoS) when computations are incorrect for non-string inputs. One can cause the V8 to attempt reading from non-permitted locations and cause a segmentation fault due to the violatio…

    fast-string-search npm