All the vulnerabilities related to the version 1.1.0 of the package
Out-of-bounds Read in base64-url
Versions of base64-url
before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input.
Update to version 2.0.0 or later.