npm/litespeed.js CVE-2021-23682: critical 9.8, EPSS 2.12%
Prototype Pollution in litespeed.js and appwrite/server-ce
Action: Upgrade litespeed.js to 0.3.12 or later.
npm i litespeed.js@0.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.12 | - |
Fixed versions
| 0.3.12 |
Sources
- osv: GHSA-v9p9-535w-4285
- https://nvd.nist.gov/vuln/detail/CVE-2021-23682
- https://github.com/appwrite/appwrite/pull/2778
- https://github.com/litespeed-js/litespeed.js/pull/18
- https://github.com/appwrite/appwrite/releases/tag/0.11.1
- https://github.com/appwrite/appwrite/releases/tag/0.12.2
- https://snyk.io/vuln/SNYK-JS-LITESPEEDJS-2359250
- https://snyk.io/vuln/SNYK-PHP-APPWRITESERVERCE-2401820
CVE-2021-23682 · published · modified · JSON