Description
A flaw enabling an infinite-loop was discovered in the code for evaluating the cumulative-distribution-function of input data. Although the documentation explains that numeric data is required, some users may confuse an array of strings like [“1”,”2”,”3”,”4”,”5”] for numeric data [1,2,3,4,5] when it is in fact string data.
Recommendation
Update the cumulative-distribution-function package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.0.0
- Patched version(s): 2.0.0
References
Could your website be exposed too?
SmartScanner can check your website for cumulative-distribution-function Infinite Loop vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- XSS vulnerability allowing arbitrary JavaScript execution - CVE-2021-41174
- Prototype pollution vulnerability in js-extend - CVE-2021-25945
- Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML - CVE-2021-41164
- validator.js has a URL validation bypass vulnerability in its isURL function - CVE-2025-56200
You might also like:
See something that needs correcting? Let us knowUpdated January 29, 2023