npm/node-forge: low

URL parsing in node-forge could lead to undesired behavior.

Action: Upgrade node-forge to 1.0.0 or later.

npm i node-forge@1.0.0

Affected

Fixed versions

Sources

• osv: GHSA-gf8q-jrpm-jvxq
• https://github.com/digitalbazaar/forge/security/advisories/GHSA-gf8q-jrpm-jvxq
• https://nvd.nist.gov/vuln/detail/CVE-2022-0122
• https://github.com/digitalbazaar/forge
• https://www.huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae

published 2022-01-08T00:22:02Z · modified 2022-01-07T22:20:43Z · JSON