Description

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check.

Remediation

References

https://snyk.io/vuln/SNYK-JS-POSIX-2400719

Related Vulnerabilities

CVE-2018-1000632 Vulnerability in maven package org.dom4j:dom4j

CVE-2021-4264 Vulnerability in maven package org.webjars:dustjs-linkedin

CVE-2021-4245 Vulnerability in npm package rfc6902

CVE-2020-13128 Vulnerability in maven package com.googlecode.gwtupload:gwtupload

CVE-2023-20873 Vulnerability in maven package org.springframework.boot:spring-boot-actuator-autoconfigure

Severity

High

Classification

CWE-252 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory