Description
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.
Remediation
References
https://hackerone.com/reports/321686
https://security.netapp.com/advisory/ntap-20230622-0009/
Related Vulnerabilities
CVE-2020-8823 Vulnerability in npm package sockjs
CVE-2022-36908 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer
CVE-2021-27906 Vulnerability in maven package org.apache.pdfbox:pdfbox
CVE-2023-26126 Vulnerability in npm package m.static
CVE-2023-26136 Vulnerability in maven package org.webjars.bowergithub.salesforce:tough-cookie