What is GHSA-73rg-x683-m3qw?

GHSA-73rg-x683-m3qw is a security advisory published by GitHub Security Advisories with High severity. Buffer overflow in canvas

Which CVE IDs does GHSA-73rg-x683-m3qw cover?

GHSA-73rg-x683-m3qw covers the following CVE IDs: CVE-2020-8215. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-73rg-x683-m3qw?

GHSA-73rg-x683-m3qw has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-73rg-x683-m3qw?

GHSA-73rg-x683-m3qw affects 1 product, including: npm/canvas:\u003c 1.6.11.

GHSA-73rg-x683-m3qwHighCVSS 8.8

Buffer overflow in canvas

Vendor

GitHub Security Advisories

Published

May 7, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-8215 →

📋 Description

A buffer overflow is present in canvas versions before 1.6.11, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.

🎯 Affected products1

npm/canvas:< 1.6.11

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-8215
https://github.com/Automattic/node-canvas/commit/c3e4ccb1c404da01e83fe5eb3626bf55f7f55957
https://hackerone.com/reports/315037
https://www.npmjs.com/package/canvas
https://github.com/advisories/GHSA-73rg-x683-m3qw