npm/@budibase/worker CVE-2022-3225: medium 5.7, EPSS 0.96%
Budibase Improper Control of Dynamically-Managed Code Resources vulnerability
Action: Upgrade @budibase/worker to 1.3.20 or later.
npm i @budibase/worker@1.3.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.20 | - |
Fixed versions
| 1.3.20 |
Sources
- osv: GHSA-x92g-49gh-63qm
- https://nvd.nist.gov/vuln/detail/CVE-2022-3225
- https://github.com/budibase/budibase/commit/d35864be0854216693a01307f81ffcabf6d549df
- https://github.com/Budibase/budibase/releases/tag/v1.3.20
- https://github.com/budibase/budibase
- https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245
CVE-2022-3225 · published · modified · JSON