What is CVE-2022-21164?

CVE-2022-21164 is a low-severity vulnerability in Node-Lmdb Project. CVSS score: 3.7/10. Published 2022-03-16.

How severe is CVE-2022-21164?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Node-Lmdb Project

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Node-lmdb_project Node-lmdb
N/a Node-lmdb — versions unspecified

References

report@snyk.io (Exploit, Patch, Third Party Advisory, x_refsource_MISC)
report@snyk.io (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-21164?: CVE-2022-21164 is a low-severity vulnerability in Node-Lmdb Project. CVSS score: 3.7/10. Published 2022-03-16.
How severe is CVE-2022-21164?: Low severity. CVSS v3 base score is 3.7 out of 10.