GHSA-6429-3g3w-6mw5HighCVSS 7.5

Uncaught Exception in bignum

Published
May 7, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-25324 →

📋 Description

All versions of the npm package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8. When verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks.

🎯 Affected products1

  • npm/bignum:<= 0.13.1

🔗 References (4)