All the vulnerabilities related to the version 1.1.0 of the package
Out-of-bounds Read in base64url
Versions of base64url
before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.
Update to version 3.0.0 or later.