GHSA-86mr-6m89-vgj3
Buffer Overflow in node-weakauras-parser
Affected versions of node-weakauras-parser are vulnerable to a Buffer Overflow. The encode_weakaura function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.
Recommendation
Upgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.
What each source reports
GitHub AdvisoriesNo score
Buffer Overflow in node-weakauras-parser
Affected versions of node-weakauras-parser are vulnerable to a Buffer Overflow. The encode_weakaura function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.
Recommendation
Upgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.
- Record
GHSA-86mr-6m89-vgj3- Weakness
- CWE-120
- Updated
- 2026-11-02
OSVNo score
Buffer Overflow in node-weakauras-parser
Affected versions of node-weakauras-parser are vulnerable to a Buffer Overflow. The encode_weakaura function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.
Recommendation
Upgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.
- Record
GHSA-86mr-6m89-vgj3- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
node-weakauras-parsernpm | 1.0.4 up to 1.0.5 | 1.0.5 |
node-weakauras-parsernpm | 2.0.0 up to 2.0.2 | 2.0.2 |
node-weakauras-parsernpm | 3.0.0 up to 3.0.1 | 3.0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-86mr-6m89-vgj3 is a vulnerability with no CVSS score yet in node-weakauras-parser, published September 3, 2020. No source lists public exploit code. Fixed in node-weakauras-parser 1.0.5.