← All advisories

Critical severity9.1NVD Advisory· Published May 29, 2018· Updated Jun 17, 2026

CVE-2018-3745

CVE-2018-3745

Description

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
atobnpm	< 2.1.0	2.1.0

Affected products

3

HackerOne/atob node modulev5
Range: <=2.0.3
ghsa-coords
pkg:npm/atob
Range: < 2.1.0
Atob Project/Atob
cpe:2.3:a:atob_project:atob:*:*:*:*:*:node.js:*:*
Range: <=2.0.3

Patches

Vulnerability mechanics

References

6

hackerone.com/reports/321686nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-8w4h-3cm3-2pm2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3745ghsaADVISORY
security.netapp.com/advisory/ntap-20230622-0009ghsaWEB
www.npmjs.com/advisories/646ghsaWEB
security.netapp.com/advisory/ntap-20230622-0009/nvd

News mentions

0

No linked articles in our index yet.