Buffer overread vulnerability

[pumano]

Today I got a message from https://nodesecurity.io:

142 - Buffer Overread

Vulnerable: All - Patched: None - Path: [email protected] > [email protected]

How to fix Consider using the --zero-fill-buffers command line argument to zero out buffer before using them.

Avoid passing numeric values to the write function.

[kenany]

Duplicate of https://github.com/maxogden/concat-stream/issues/56.

[LinusU]

This was fixed in concat-stream 1.5.2, yet for some reason nodesecurity still shows it as vulnerable...