GHSA-hx7j-43w2-7rj7
Prototype pollution in nconf-toml
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | nconf-toml | >= 0.0.1, <= 0.0.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.
References
External links from the advisory. They lead to third-party sites.