| modules: | |
| - module: code.sajari.com/docconv | |
| versions: | |
| - fixed: 1.2.1 | |
| vulnerable_at: 1.2.0 | |
| packages: | |
| - package: code.sajari.com/docconv/docd | |
| symbols: | |
| - serve | |
| derived_symbols: | |
| - main | |
| description: | | |
| An attacker can remotely supply a specially crafted input that causes | |
| uncontrolled memory allocation. | |
| cves: | |
| - CVE-2022-4741 | |
| ghsas: | |
| - GHSA-qvx2-59g8-8hph | |
| references: | |
| - fix: https://github.com/sajari/docconv/commit/42bcff666855ab978e67a9041d0cdea552f20301 |