npm/express-cart: high

NoSQL injection in express-cart

Action: Upgrade express-cart to 1.1.8 or later.

npm i express-cart@1.1.8

Affected

Fixed versions

Sources

• osv: GHSA-f5cv-xrv9-r8w7
• https://hackerone.com/reports/397445
• https://github.com/nodejs/security-wg
• https://github.com/nodejs/security-wg/blob/master/vuln/npm/472.json
• https://www.npmjs.com/advisories/724

published 2020-09-01T21:17:16Z · modified 2021-09-24T20:58:36Z · JSON