~ / search / GHSA-33rv-m2gp-mm2r

GHSA-33rv-m2gp-mm2r

Prototype pollution in safe-flat

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-25927

Packages

EcosystemPackageAffectedFixed in
npm safe-flat >= 2.0.0, < 2.0.2 2.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in 'safe-flat' versions 2.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

References

External links from the advisory. They lead to third-party sites.