Vulnerabilities in NodeJS C/C++ add-on extensions

1. node-addon-api

   1 14 2,205 8.7 C++

   Module for using Node-API from C++

   

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. node-addon-examples

   2 3 2,518 5.2 C++

   Node.js C++ addon examples from http://nodejs.org/docs/latest/api/addons.html

   

   Looking at the provided examples, we can see that in some examples , assert is used to check the return value of some functions. However, if an assert is reached by tainted values (from the javascript code) during the program execution, it can lead to a crash (DoS). While reviewing some projects, we found several occurrences of reachable asserts in the code logic, so I thought it’s worth mentioning as part of the previous list.

4. node-gyp

   3 26 10,038 7.4 Python

   Node.js native addon build tool

   

   Install node-gyp (https://github.com/nodejs/node-gyp).

Suggest a related project