CVE-2021-21304
1 advisory.
npm/dynamoose CVE-2021-21304: high 7.2
Prototype Pollution in Dynamoose
Action: Upgrade dynamoose to 2.7.0 or later.
npm i dynamoose@2.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.7.0 | - |
Fixed versions
| 2.7.0 |
Sources
- osv: GHSA-rrqm-p222-8ph2
- https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2
- https://nvd.nist.gov/vuln/detail/CVE-2021-21304
- https://github.com/dynamoose/dynamoose/commit/324c62b4709204955931a187362f8999805b1d8e
- https://github.com/dynamoose/dynamoose
- https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0
- https://www.npmjs.com/package/dynamoose
CVE-2021-21304 · published · modified · JSON