high7.5
CVE-2022-21164
Unhandled case in node-lmdb
Impact
The package node-lmdb before 0.9.7 is vulnerable to Denial of Service (DoS) when defining a non-invokable `ToString` value, which will cause a crash during type check.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | node-lmdb | < 0.9.7 | 0.9.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Node-Lmdb Project | Node-Lmdb | before 0.9.7 |