Skip to content
OpenAdvisories
Low · 3.7 CVE-2022-21164 EUVD-2022-1280GHSA-32j9-6qqm-mq9gSNYK-JS-NODELMDB-2400723

Denial of Service (DoS)

Published Mar 16, 2022 · Updated Sep 16, 2024 · Assigned by snyk

Description

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.

Affected products

VendorProductAffectedFixed
— node-lmdb unspecified – < 0.9.7 0.9.7

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-lmdb < 0.9.7 0.9.7 GHSA-32j9-6qqm-mq9g

References