Get real-time updates on Telegram
ghsa:GHSA-R9W8-H9R3-54W4: devalue <= 5.9.2
devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation. Affected range: <= 5.9.2. Fixed version: 5.9.3.
Affected technology
devalue · <= 5.9.2
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- Product
- devalue
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-r9w8-h9r3-54w4.html