CVE-2018-21270

score

<0.1

cvss

6.5

epss

3.7%

published

2020-12-03

kev added

—

first seen

2026-10-21

Node.js stringstream module < 0.0.6 contains an out-of-bounds read caused by allocation of uninitialized buffers when a number is passed in the input stream, letting attackers cause information disclosure, exploit requires passing a number in the input stream.