Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sonicdoe

#18113of 53,630
15Total CVSS
Vulnerabilities · 2
High
2
PT-2021-22434
7.5
2021-08-31
Unknown · Detect-Character-Encoding · CVE-2021-39176
**Name of the Vulnerable Software and Affected Versions** detect-character-encoding versions 0.3.0 and earlier **Description** The issue is related to allocated memory not being released in detect-character-encoding versions 0.3.0 and earlier. This can cause a program using the library to become unavailable when running out of memory, especially if the program is accessible over the internet. The severity of the issue may vary depending on the specific implementation. **Recommendations** For detect-character-encoding versions 0.3.0 and earlier, update to version 0.3.1 to resolve the issue. As a temporary workaround, consider restricting the use of the detect-character-encoding library in memory-intensive operations until the update is applied.
PT-2021-22414
7.5
2021-08-24
Npm · Detect-Character-Encoding · CVE-2021-39157
**Name of the Vulnerable Software and Affected Versions** detect-character-encoding versions 0.6.0 and earlier **Description** The issue occurs when data matching no charset causes the Node.js process to crash. This problem has been patched in version 0.7.0. **Recommendations** For detect-character-encoding versions 0.6.0 and earlier, update to version 0.7.0 to resolve the issue.