npm/@sap/hana-client CVE-2024-45277: medium 4.3, EPSS 0.58%
SAP HANA Node.js client package vulnerable to Prototype Pollution
Action: Upgrade @sap/hana-client to 2.21.31 or later.
npm i @sap/hana-client@2.21.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.21.31 | - |
Fixed versions
| 2.21.31 |
Sources
- osv: GHSA-6339-gv7w-g5f4
- https://nvd.nist.gov/vuln/detail/CVE-2024-45277
- https://me.sap.com/notes/3520100
- https://url.sap/sapsecuritypatchday
- https://www.npmjs.com/package/@sap/hana-client?activeTab=code
CVE-2024-45277 · published · modified · JSON