All the vulnerabilities related to the version 1.1.4 of the package
Out-of-bounds Read in base64url
Versions of base64url
before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.
Update to version 3.0.0 or later.
Out-of-bounds Read in base64-url
Versions of base64-url
before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input.
Update to version 2.0.0 or later.