CVE-2021-21368
1 advisory.
npm/msgpack5 CVE-2021-21368: medium 6.7, EPSS 1.65%
Prototype poisoning
Action: Upgrade msgpack5 to 3.6.1 or later.
npm i msgpack5@3.6.1npm i msgpack5@4.5.1npm i msgpack5@5.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.1 | - |
| 4.0.0 | 4.5.1 | - |
| 5.0.0 | 5.2.1 | - |
Fixed versions
| 3.6.1 | 4.5.1 | 5.2.1 |
Sources
- osv: GHSA-gmjw-49p4-pcfm
- https://github.com/mcollina/msgpack5/security/advisories/GHSA-gmjw-49p4-pcfm
- https://nvd.nist.gov/vuln/detail/CVE-2021-21368
- https://github.com/mcollina/msgpack5/commit/d4e6cb956ae51c8bb2828e71c7c1107c340cf1e8
- https://github.com/mcollina/msgpack5/releases/tag/v3.6.1
- https://github.com/mcollina/msgpack5/releases/tag/v4.5.1
- https://github.com/mcollina/msgpack5/releases/tag/v5.2.1
- https://www.npmjs.com/package/msgpack5
CVE-2021-21368 · published · modified · JSON