npm/bignum: critical
Malware in pre-build binaries of bignum
Action: Upgrade bignum to 0.13.1 or later.
npm i bignum@0.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.12.2 | 0.13.1 | - |
Fixed versions
| 0.13.1 |
Sources
- osv: GHSA-7cgc-fjv4-52x6
- https://github.com/justmoon/node-bignum/security/advisories/GHSA-7cgc-fjv4-52x6
- https://github.com/justmoon/node-bignum/commit/57e48c3f052249725517415d83c7147e4a8c44c8
- https://github.com/justmoon/node-bignum/commit/72951c53e7c5c1ac157f04686dc12c3c393b4b08
- https://github.com/justmoon/node-bignum
published · modified · JSON