npm/modern-async CVE-2021-41167: high 7.5, EPSS 1.68%
modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests
Action: Upgrade modern-async to 1.0.4 or later.
npm i modern-async@1.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4 | - |
Fixed versions
| 1.0.4 |
Sources
- osv: GHSA-3pcq-34w5-p4g2
- https://github.com/nicolas-van/modern-async/security/advisories/GHSA-3pcq-34w5-p4g2
- https://nvd.nist.gov/vuln/detail/CVE-2021-41167
- https://github.com/nicolas-van/modern-async/issues/5
- https://github.com/nicolas-van/modern-async/commit/0010d28de1b15d51db3976080e26357fa7144436
- https://github.com/nicolas-van/modern-async
CVE-2021-41167 · published · modified · JSON