npm/dossier: critical 9.8

Malicious Package in dossier

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-c8h6-89q2-mgv8
• https://github.com/advisories/GHSA-c8h6-89q2-mgv8
• https://snyk.io/vuln/SNYK-JS-DOSSIER-450994
• https://www.npmjs.com/advisories/625

published 2020-09-01T19:55:48Z · modified 2021-09-24T17:24:28Z · JSON