npm/constantinople: critical 10
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
Action: Upgrade constantinople to 3.1.1 or later.
npm i constantinople@3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.1 | - |
Fixed versions
| 3.1.1 |
Sources
- osv: GHSA-4vmm-mhcq-4x9j
- https://github.com/pugjs/constantinople/commit/01d409c0d081dfd65223e6b7767c244156d35f7f
- https://bugzilla.redhat.com/show_bug.cgi?id=1577703
- https://snyk.io/vuln/npm:constantinople:20180421
- https://www.npmjs.com/advisories/568
published · modified · JSON