Threats tagged 'ghsa-6cvq-7mp2-2cxc'

Devalue versions before 5.9.3 have a validation bypass vulnerability in the parse function that allows custom ArrayBuffer revivers to skip typed-array allocation checks. This flaw can be exploited by attackers supplying crafted input to cause allocation of very large ArrayBuffers, leading to memory exhaustion and denial of service.