npm/nobelprizeparser: critical
Code injection in nobelprizeparser
Action: Upgrade nobelprizeparser to 1.0.2 or later.
npm i nobelprizeparser@1.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2 | - |
Fixed versions
| 1.0.2 |
Sources
- osv: GHSA-4wv4-mgfq-598v
- https://github.com/AnneTheDev/nobelprize/security/advisories/GHSA-4wv4-mgfq-598v
- https://github.com/AnneTheDev/nobelprize/commit/00639d375b0efd097bc1eca18d9dc021691b9286
- https://www.npmjs.com/package/nobelprizeparser
published · modified · JSON