CVE-2021-39131

Name of the Vulnerable Software and Affected Versions ced versions 0.1.0

Description The issue arises when passing data types other than Buffer to ced, causing the Node.js process to crash. This problem has been resolved in version 1.0.0. As a temporary measure, users can verify if an object is a Buffer using Buffer.isBuffer(obj) before passing it to ced.

Recommendations For ced version 0.1.0, upgrade to version 1.0.0 to resolve the issue. As a temporary workaround, before passing an argument to ced, verify it’s a Buffer using Buffer.isBuffer(obj).