npm/keyget CVE-2021-23760: medium 5.6, EPSS 1.68%
Prototype Pollution in keyget
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.4.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9fp7-4fjm-q3mf
- https://nvd.nist.gov/vuln/detail/CVE-2021-23760
- https://github.com/rumkin/keyget
- https://security.snyk.io/vuln/SNYK-JS-KEYGET-1048048
- https://snyk.io/vuln/SNYK-JS-KEYGET-2342624
CVE-2021-23760 · published · modified · JSON