npm/react-editable-json-tree CVE-2022-36010: critical 10, EPSS 1.49%
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Action: Upgrade react-editable-json-tree to 2.2.2 or later.
npm i react-editable-json-tree@2.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.2 | - |
Fixed versions
| 2.2.2 |
Sources
- osv: GHSA-j3rv-w43q-f9x2
- https://github.com/oxyno-zeta/react-editable-json-tree/security/advisories/GHSA-j3rv-w43q-f9x2
- https://nvd.nist.gov/vuln/detail/CVE-2022-36010
- https://github.com/oxyno-zeta/react-editable-json-tree
- https://github.com/oxyno-zeta/react-editable-json-tree/releases/tag/2.2.2
CVE-2022-36010 · published · modified · JSON