Description
A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | bittorrent-dht node module | <5.1.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | bittorrent-dht | < 5.1.3 | 5.1.3 | GHSA-77g4-36jp-5v3m |