CVE-2024-21521: @discordjs/opus vulnerable to Denial of Service
All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash.
References
- gist.github.com/dellalibera/98c48fd74bb240adbd7841a5c02aba9e
- github.com/advisories/GHSA-43wq-xrcm-3vgr
- github.com/discordjs/opus
- github.com/discordjs/opus/blob/814e500c2785c5207ace19650192629beba2728b/src/node-opus.cc
- nvd.nist.gov/vuln/detail/CVE-2024-21521
- security.snyk.io/vuln/SNYK-JS-DISCORDJSOPUS-6370643
Code Behaviors & Features
Detect and mitigate CVE-2024-21521 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →