npm/@budibase/server: critical 9.8
Budibase affected by VM2 Constructor Escape Vulnerability
Action: Upgrade @budibase/server to 2.20.0 or later.
npm i @budibase/server@2.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0 | - |
Fixed versions
| 2.20.0 |
Sources
- osv: GHSA-4g2x-vq5p-5vj6
- https://github.com/Budibase/budibase/security/advisories/GHSA-4g2x-vq5p-5vj6
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5
- https://github.com/Budibase/budibase/commit/601c02a4acc695b1cc602bf611f0ae66d6e5868f
- https://github.com/Budibase/budibase
published · modified · JSON