p PatchFirst

PatchFirst · Latest vulnerabilities

fast-copy vulnerabilities

Vulnerability published for fast-copy in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-jggr-w7fw-pc2j

    Medium · CVSS 6.3Fix available

    fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

    ## Summary `fast-copy` traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native `RangeError: Maximum call stack size exceeded` from inside the library. ## Details Both `copy` and `copyStrict` recurse once per level of nesting. The value does not need to be circular (circular references were already handled correctly via an internal cache) and it does not need to be large. A plain object nested a few thousand levels deep is only a few kilobytes of equivalent JSON. Measured depths at which copying begins to fail (Node.js, V8; the exact ceiling vari

    fast-copy fast-copy fast-copyNode.js
    • Update to 2.2.0
    • Update to 3.1.0
    • Update to 4.1.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →