npm/pac-resolver CVE-2021-23406: high 8.1, EPSS 2.94%
Code Injection in pac-resolver
Action: Upgrade pac-resolver to 5.0.0 or later.
npm i pac-resolver@5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-9j49-mfvp-vmhm
- https://nvd.nist.gov/vuln/detail/CVE-2021-23406
- https://github.com/TooTallNate/node-degenerator/commit/9d25bb67d957bc2e5425fea7bf7a58b3fc64ff9e
- https://github.com/TooTallNate/node-degenerator/commit/ccc3445354135398b6eb1a04c7d27c13b833f2d5
- https://github.com/TooTallNate
- https://github.com/TooTallNate/node-pac-resolver/releases/tag/5.0.0
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1568506
- https://snyk.io/vuln/SNYK-JS-PACRESOLVER-1564857
CVE-2021-23406 · published · modified · JSON