{"id":"GHSA-86mr-6m89-vgj3","aliases":[],"status":"published","title":"Buffer Overflow in node-weakauras-parser","description":"Affected versions of `node-weakauras-parser` are vulnerable to a Buffer Overflow. The `encode_weakaura` function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.\n\n\n## Recommendation\n\nUpgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2020-09-03T15:51:38Z","modified":"2023-01-09T05:03:53Z","fixes":[{"ecosystem":"npm","package":"node-weakauras-parser","fixed_in":["1.0.5","2.0.2","3.0.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.4"},{"fixed":"1.0.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}]},{"source":"osv","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"1.0.4"},{"fixed":"1.0.5"}]}]},{"source":"osv","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}]},{"source":"osv","ecosystem":"npm","package":"node-weakauras-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}]}],"references":[{"url":"https://github.com/Zireael-N/node-weakauras-parser/commit/bc146da09db689e554d28e948f1cf1c138f09f69#diff-023afe6291ac9ada88788108cb3367b3R38-R43","tags":["web"]},{"url":"https://www.npmjs.com/advisories/1504","tags":["web"]},{"url":"https://github.com/advisories/GHSA-86mr-6m89-vgj3"},{"url":"https://github.com/Zireael-N/node-weakauras-parser","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-86mr-6m89-vgj3","title":"Buffer Overflow in node-weakauras-parser","description":"Affected versions of `node-weakauras-parser` are vulnerable to a Buffer Overflow. The `encode_weakaura` function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.\n\n\n## Recommendation\n\nUpgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.","status":"published","published":"2020-09-03T15:51:38Z","modified":"2023-01-09T05:03:53Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:36:07.581563Z"}],"osv":[{"id":"GHSA-86mr-6m89-vgj3","title":"Buffer Overflow in node-weakauras-parser","description":"Affected versions of `node-weakauras-parser` are vulnerable to a Buffer Overflow. The `encode_weakaura` function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.\n\n\n## Recommendation\n\nUpgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.","status":"published","published":"2020-09-03T15:51:38Z","modified":"2021-10-04T21:10:07Z","cwes":["CWE-120"],"updated_at":"2026-11-02T15:46:42.077781Z"}]}}