All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
node-bluetooth-serial-port
{ "last_known_affected_version_range": "<= 2.2.7" }