CVE-2019-20149
1 advisory.
npm/kind-of CVE-2019-20149: high 7.5, EPSS 2.34%
Validation Bypass in kind-of
Action: Upgrade kind-of to 6.0.3 or later.
npm i kind-of@6.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.0.3 | - |
Fixed versions
| 6.0.3 |
Sources
- osv: GHSA-6c8f-qphg-qjgp
- https://nvd.nist.gov/vuln/detail/CVE-2019-20149
- https://github.com/jonschlinkert/kind-of/issues/30
- https://github.com/jonschlinkert/kind-of/pull/31
- https://github.com/jonschlinkert/kind-of/commit/1df992ce6d5a1292048e5fe9c52c5382f941ee0b
- https://snyk.io/vuln/SNYK-JS-KINDOF-537849
- https://www.npmjs.com/advisories/1490
CVE-2019-20149 · published · modified · JSON