CVE Feed

    Dashboard / CVE / CVE-2021-39131

    CVE-2021-39131

    ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buffer` causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a `Buffer` using `Buffer.isBuffer(obj)`.

    Published:Aug 17, 2021
    Last Modified:Nov 21, 2024
    EPS:Aug 17, 2021
    EPSS Score:0.00446
    CVSS Score:7.5

    Affected Products

    Vendor
    Ced Project
    Product
    Ced

    Exploits

    https://github.com/sonicdoe/ced/security/advisories/GHSA-27wq-qx3q-fxm9https://github.com/sonicdoe/ced/security/advisories/GHSA-27wq-qx3q-fxm9

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-48 Passing Local Filenames to Functions That Expect a URL

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High