Description
All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | @discordjs/opus | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @discordjs/opus | < 0.8.0 | 0.8.0 | GHSA-rvgf-69j7-xh78 |