Threats tagged 'ghsa-62ch-8vmq-8xm7'

figlet.js versions prior to 1.11.3 contain a vulnerability where the text() and textSync() functions can enter an infinite loop if the whitespaceBreak option is enabled and the specified width is smaller than the width of a single FIGlet character. This occurs because the breakWord() function fails to find a valid break point and does not consume any input, causing generateFigTextLines() to repeatedly process the same input, leading to high CPU usage and memory growth. This issue is resolved in version 1.11.3.