~ / search / GHSA-2w3f-9w3q-qw77

GHSA-2w3f-9w3q-qw77

Prototype Pollution in config-handler

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-23448

Packages

EcosystemPackageAffectedFixed in
npm config-handler <= 2.0.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.

References

External links from the advisory. They lead to third-party sites.