Find, fix and prevent vulnerabilities in your code.

Overview

bigint-buffer is a Node utility that converts TC39 Proposed BigInts to and from buffers

Affected versions of this package are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.

PoC

let be = require('bigint-buffer');
console.log(be.toBigIntLE(null));

Remediation

There is no fixed version for bigint-buffer.

References

• Native Node Extension Risks
• Vulnerable Code