Skip to content
OpenAdvisories

Package · npm

npmconf

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Out-of-bounds Read in npmconf

    Versions of `npmconf` before 2.1.3 allocate and write to disk uninitialized memory contents when a typed number is passed as input on Node.js 4.x. ## Recommendation Update to version 2.1.3 or later. Consider switching to another config storage mechanism, as n…