p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de fast-copy

Vulnerabilidad publicada para fast-copy en los últimos 30 días: 1. En el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidad: 1

  1. GHSA-jggr-w7fw-pc2j

    Media · CVSS 6.3Corrección disponible

    fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

    ## Summary `fast-copy` traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native `RangeError: Maximum call stack size exceeded` from inside the library. ## Details Both `copy` and `copyStrict` recurse once per level of nesting. The value does not need to be circular (circular references were already handled correctly via an internal cache) and it does not need to be large. A plain object nested a few thousand levels deep is only a few kilobytes of equivalent JSON. Measured depths at which copying begins to fail (Node.js, V8; the exact ceiling vari

    • Actualiza a 2.2.0
    • Actualiza a 3.1.0
    • Actualiza a 4.1.0
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →