7.5
High
CVE-2022-25345 All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder…
Description
All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| @discordjs/opus | Versions not published |