Description
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.
Remediation
References
https://hackerone.com/reports/321686
https://security.netapp.com/advisory/ntap-20230622-0009/
Related Vulnerabilities
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2023-46133 Vulnerability in npm package crypto-es
CVE-2022-41404 Vulnerability in maven package org.ini4j:ini4j
CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.insteon
CVE-2023-48887 Vulnerability in maven package org.jupiter-rpc:jupiter-rpc