npm/just-safe-set CVE-2021-25952: critical 9.8, EPSS 3.34%
Prototype polluation in just-safe-set
Action: Upgrade just-safe-set to 2.2.2 or later.
npm i just-safe-set@2.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.2.2 | - |
Fixed versions
| 2.2.2 |
Sources
- osv: GHSA-v26w-gcxh-v4r7
- https://nvd.nist.gov/vuln/detail/CVE-2021-25952
- https://github.com/angus-c/just/pull/267
- https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53
- https://github.com/angus-c/just
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25952
CVE-2021-25952 · published · modified · JSON