{"id":"GHSA-xm7f-x4wx-wmgv","aliases":[],"status":"published","title":"Out-of-bounds Read in byte","description":"Versions of `byte` before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length\n\n\n\n## Recommendation\n\nUpdate to version 1.4.1 or later.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-06-04T15:47:43Z","modified":"2023-01-09T05:01:43Z","fixes":[{"ecosystem":"npm","package":"byte","fixed_in":["1.4.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"byte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1"}]}]},{"source":"osv","ecosystem":"npm","package":"byte","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.4.1"}]}]}],"references":[{"url":"https://github.com/node-modules/byte/pull/3","tags":["web"]},{"url":"https://hackerone.com/reports/330351","tags":["web"]},{"url":"https://www.npmjs.com/advisories/657","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xm7f-x4wx-wmgv"}],"sources":{"ghsa":[{"id":"GHSA-xm7f-x4wx-wmgv","title":"Out-of-bounds Read in byte","description":"Versions of `byte` before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length\n\n\n\n## Recommendation\n\nUpdate to version 1.4.1 or later.","status":"published","published":"2019-06-04T15:47:43Z","modified":"2023-01-09T05:01:43Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:36:02.073372Z"}],"osv":[{"id":"GHSA-xm7f-x4wx-wmgv","title":"Out-of-bounds Read in byte","description":"Versions of `byte` before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length\n\n\n\n## Recommendation\n\nUpdate to version 1.4.1 or later.","status":"published","published":"2019-06-04T15:47:43Z","modified":"2020-08-31T18:31:36Z","cwes":["CWE-125"],"updated_at":"2026-11-02T15:47:00.198893Z"}]}}