GHSA-w5fc-gj3h-26rxHighCVSS 7.5

speaker vulnerable to Denial of Service

Published
July 10, 2024
Last Modified
July 31, 2024

🔗 CVE IDs covered (1)

📋 Description

All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash.

🎯 Affected products1

  • npm/speaker:<= 0.5.5

🔗 References (4)