Skip to content

Product

npm audify vulnerabilities

1 published CVE affecting npm audify, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm audify CVEs

Newest publication first

  1. CVE-2024-21522 audify vulnerable to Improper Validation of Array Index

    Published
    HighCVSS 7.5 EPSS 0.62%

    All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusDecoder().decodeFloat functions it is not checked for negative values. This can lead to a process crash.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.