GMS-2019-26: Remote Memory Exposure in floody

(updated )

Versions of floody are vulnerable to remote memory exposure.

. appending a chunk of uninitialized memory.

Proof of Concept:

var f = require('floody')(process.stdout); 
f.write(USERSUPPLIEDINPUT); 
'f.stop(); ## Recommendation

Update to or later.

References

Detect and mitigate GMS-2019-26 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →