Name of the Vulnerable Software and Affected Versions node-weakauras-parser versions prior to 1.0.5 node-weakauras-parser versions prior to 2.0.2 node-weakauras-parser versions prior to 3.0.1

Description The issue arises from a Buffer Overflow in affected versions of the node-weakauras-parser. Specifically, the encode weakaura function fails to properly validate the input size, leading to an overflow when a large buffer size, such as 13835058055282163711 bytes, is used on 64-bit systems.

Recommendations Upgrade to version 1.0.5 or later. Upgrade to version 2.0.2 or later. Upgrade to version 3.0.1 or later.