GHSA-v6gv-fg46-h89j
Sensitive Data Exposure in put
All versions of put are vulnerable to Uninitialized Memory Exposure. The package incorrectly calculates the allocated Buffer size and does not trim the bytes written, which may allow attackers to access uninitialized memory containing sensitive data. This vulnerability only affects versions of Node.js <=6.x.
Recommendation
Upgrade your Node.js version or consider using an alternative package.
What each source reports
GitHub AdvisoriesNo score
Sensitive Data Exposure in put
All versions of put are vulnerable to Uninitialized Memory Exposure. The package incorrectly calculates the allocated Buffer size and does not trim the bytes written, which may allow attackers to access uninitialized memory containing sensitive data. This vulnerability only affects versions of Node.js <=6.x.
Recommendation
Upgrade your Node.js version or consider using an alternative package.
- Record
GHSA-v6gv-fg46-h89j- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVNo score
Sensitive Data Exposure in put
All versions of put are vulnerable to Uninitialized Memory Exposure. The package incorrectly calculates the allocated Buffer size and does not trim the bytes written, which may allow attackers to access uninitialized memory containing sensitive data. This vulnerability only affects versions of Node.js <=6.x.
Recommendation
Upgrade your Node.js version or consider using an alternative package.
- Record
GHSA-v6gv-fg46-h89j- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
putnpm | All versions | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-v6gv-fg46-h89j is a vulnerability with no CVSS score yet in put, published September 3, 2020. No source lists public exploit code. No source names a fixed version.