Skip to content
OpenAdvisories

Package · npm

floody

1 known vulnerabilities.

1 result · Feed

  • Medium 5.1

    Remote Memory Exposure in floody

    Versions of `floody` before 0.1.1 are vulnerable to remote memory exposure. .write(number)` in the affected `floody` versions passes a number to Buffer constructor, appending a chunk of uninitialized memory. Proof of Concept: ``` var f = require('floody')(pro…