Description
A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | node-canvas | Not Fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | canvas | < 1.6.11 | 1.6.11 | GHSA-73rg-x683-m3qw |