GHSA-43wq-xrcm-3vgrHighCVSS 7.5

@discordjs/opus vulnerable to Denial of Service

Published
July 10, 2024
Last Modified
July 31, 2024

🔗 CVE IDs covered (1)

CVE-2024-21521 →

📋 Description

All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash.

🎯 Affected products1

  • npm/@discordjs/opus:<= 0.9.0

🔗 References (5)