Verified

ghsa:GHSA-JGGR-W7FW-PC2J: fast-copy >= 4.0.0, < 4.1.0, >= 3.0.0, < 3.1.0, < 2.2.0

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values. Affected range: >= 4.0.0, < 4.1.0. Fixed version: 4.1.0. Affected range: >= 3.0.0, < 3.1.0. Fixed version: 3.1.0. Affected range: < 2.2.0. Fixed version: 2.2.0.

Affected technology

fast-copy · >= 4.0.0, < 4.1.0
Vendor not specified by the source

fast-copy · >= 3.0.0, < 3.1.0
Vendor not specified by the source

fast-copy · < 2.2.0
Vendor not specified by the source

Component: Not specified by the source
Function: rather

What an attacker can do

The source does not specify what an attacker can achieve.

Published 12-Oct-2026 10:15 UTC

Product: fast-copy
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-jggr-w7fw-pc2j.html