Description (CNA)
The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / muhammara | affected unspecified before 2.6.0 |
| n/a / hummus | affected 0 before unspecified |
CWE
No CWE identifiers supplied.
References
- https://security.snyk.io/vuln/SNYK-JS-MUHAMMARA-3091137
- https://security.snyk.io/vuln/SNYK-JS-HUMMUS-3091139
- https://github.com/julianhille/MuhammaraJS/commit/0a6427eec82ef2978995e453de2dc0d6224dd46c
- https://github.com/julianhille/MuhammaraJS/issues/188
- https://github.com/galkahana/HummusJS/issues/439
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.