Description
All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | bignum | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | bignum | <= 0.13.1 | — | GHSA-6429-3g3w-6mw5 |