Every CVESearch/Get API key

GHSA-9r3m-mhfm-39cm

Incorrect Calculation in bigint-money

No scoreFix available

GHSA-9r3m-mhfm-39cm is a vulnerability with no CVSS score yet in bigint-money, published September 11, 2020. No source lists public exploit code. Fixed in bigint-money 0.6.2.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.6.2bigint-money

Description

Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems.

Recommendation

Upgrade to version 0.6.2 or later.

Affected packages

Affected packages
PackageAffectedFixed
bigint-money
npm
before 0.6.2
0.6.2

What each source reports

GitHub AdvisoriesNo score

Incorrect Calculation in bigint-money

Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems.

Recommendation

Upgrade to version 0.6.2 or later.

Record
GHSA-9r3m-mhfm-39cm
Weakness
CWE-682
Updated
2026-11-02
OSVNo score

Incorrect Calculation in bigint-money

Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems.

Recommendation

Upgrade to version 0.6.2 or later.

Record
GHSA-9r3m-mhfm-39cm
Weakness
CWE-682
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open