Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31166
HistoryJul 10, 2021 - 1:46 p.m.

Information Disclosure

2021-07-1013:46:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.001 Low

EPSS

Percentile

46.7%

Node.js is vulnerable to an out-of-bounds read. The libuv's uv__idna_toascii() function which converts strings to ASCII is called by Nodeโ€™s dns moduleโ€™s lookup() function and can lead to information disclosures or crashes.