tocsin

Debian/npm: unknown

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially c

Action: Upgrade npm to 12.0.2+ds1-1 or later.

Affected

introducedfixedlast affected
012.0.2+ds1-1-

Fixed versions

12.0.2+ds1-1

Sources

published · modified · JSON