GHSA-jggr-w7fw-pc2j: fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values
fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library.
References
- github.com/advisories/GHSA-jggr-w7fw-pc2j
- github.com/planttheidea/fast-copy/commit/359c00884ae8ae31f10925fd0e2fc66661db6cef
- github.com/planttheidea/fast-copy/commit/caa7caace65767dfe252f0dc5115d82c99ca16b9
- github.com/planttheidea/fast-copy/commit/dedf465e5329fbd149f13b53521af962d16ff8df
- github.com/planttheidea/fast-copy/pull/137
- github.com/planttheidea/fast-copy/pull/138
- github.com/planttheidea/fast-copy/pull/139
- github.com/planttheidea/fast-copy/releases/tag/v2.2.0
- github.com/planttheidea/fast-copy/releases/tag/v3.1.0
- github.com/planttheidea/fast-copy/releases/tag/v4.1.0
- github.com/planttheidea/fast-copy/security/advisories/GHSA-jggr-w7fw-pc2j
Code Behaviors & Features
Detect and mitigate GHSA-jggr-w7fw-pc2j with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →