Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-39131

Improper Handling of Unexpected Data Type in ced

Description

ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buffer` causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a `Buffer` using `Buffer.isBuffer(obj)`.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sonicdoe ced

  • < 1.0.0affected

References