CVE-2026-82417: Unchecked Constructor Isbuffer Call

Calling `constructor.isBuffer(...)` without checking `typeof ... === 'function'` can throw an unhandled TypeError if an object with a non-callable `constructor.isBuffer` property is provided.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-82417-unchecked-constructor-isbuffer-call --engine opengrep

Description

Calling `constructor.isBuffer(...)` without checking `typeof ... === 'function'` can throw an unhandled TypeError if an object with a non-callable `constructor.isBuffer` property is provided.