npm/nconf-toml CVE-2021-25946: critical 9.8, EPSS 3.30%
Prototype pollution in nconf-toml
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | - | 0.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hx7j-43w2-7rj7
- https://nvd.nist.gov/vuln/detail/CVE-2021-25946
- https://github.com/RobLoach/nconf-toml
- https://github.com/RobLoach/nconf-toml/blob/8ade08cd1cfb9691ab7cc5c3514cc05c5085918f/index.js#L8
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25946
CVE-2021-25946 · published · modified · JSON