CVE-2024-21526: Tootallnate Node-Speaker

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash.

Affected products

• Tootallnate Node-Speaker: any version

Published 2024-07-10. Last modified 2026-06-17.