Skip to content
OpenAdvisories
High · 7.5 CVE-2024-21521 EUVD-2024-2242GHSA-43wq-xrcm-3vgr

@discordjs/opus vulnerable to Denial of Service

Published Jul 10, 2024 · Updated Jan 26, 2025 · Assigned by snyk

Description

All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash.

Affected products

VendorProductAffectedFixed
— @discordjs/opus — —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @discordjs/opus <= 0.9.0 — GHSA-43wq-xrcm-3vgr

References