-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper input validation in functions that convert arguments to numbers using ToNumber() without type checking. The PoC demonstrates crashes when passing objects with toString properties to these functions. All four functions shown in the node-opus.cc code (constructor, setBitrate, applyEncoderCTL, applyDecoderCTL) exhibit this pattern of unsafe input handling, matching the advisory's description of multiple vulnerable entry points. The direct correlation between PoC test cases and function implementations confirms their vulnerability.
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @discordjs/opus | npm | <= 0.9.0 |
Ongoing coverage of React2Shell