npm/webcrack CVE-2024-43373: high 7.7, EPSS 0.45%
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
Action: Upgrade webcrack to 2.14.1 or later.
npm i webcrack@2.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.1 | - |
Fixed versions
| 2.14.1 |
Sources
- osv: GHSA-ccqh-278p-xq6w
- https://github.com/j4k0xb/webcrack/security/advisories/GHSA-ccqh-278p-xq6w
- https://nvd.nist.gov/vuln/detail/CVE-2024-43373
- https://github.com/j4k0xb/webcrack/commit/4bc5c6f353012ee7edc2cb39d01a728ab7426999
- https://github.com/j4k0xb/webcrack
- https://github.com/j4k0xb/webcrack/blob/241f9469e6401f3dabc6373233d85a5e76966b54/packages/webcrack/src/unpack/bundle.ts#L79
CVE-2024-43373 · published · modified · JSON