npm/@fast-csv/parse CVE-2020-26256: medium 5.7, EPSS 1.54%
Denial of service in fast-csv
Action: Upgrade @fast-csv/parse to 4.3.6 or later.
npm i @fast-csv/parse@4.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.6 | - |
Fixed versions
| 4.3.6 |
Sources
- osv: GHSA-8cv5-p934-3hwp#npm/@fast-csv/parse
- https://github.com/C2FO/fast-csv/security/advisories/GHSA-8cv5-p934-3hwp
- https://nvd.nist.gov/vuln/detail/CVE-2020-26256
- https://github.com/C2FO/fast-csv/issues/540
- https://github.com/C2FO/fast-csv/commit/4bbd39f26a8cd7382151ab4f5fb102234b2f829e
- https://github.com/C2FO/fast-csv
- https://lgtm.com/query/8609731774537641779
- https://www.npmjs.com/advisories/1587
- https://www.npmjs.com/advisories/1588
- https://www.npmjs.com/package/@fast-csv/parse
- https://www.npmjs.com/package/fast-csv
CVE-2020-26256 · published · modified · JSON