npm detect-character-encoding vulnerabilities

Latest npm detect-character-encoding CVEs

Newest publication first

1. CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding

   Published 2021-08-31

   High·CVSS 7.5 EPSS 1.9%

   detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1.

2. CVE-2021-39157 Improper Handling of Exceptional Conditions in detect-character-encoding

   Published 2021-08-24

   High·CVSS 7.5 EPSS 2.1%

   detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in detect-character-encoding v0.7.0. No workaround are av...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.