CVE-2021-21412
1 advisory.
npm/@thi.ng/egf CVE-2021-21412: medium 6.4, EPSS 1.34%
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
Action: Upgrade @thi.ng/egf to 0.4.0 or later.
npm i @thi.ng/egf@0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-rj44-gpjc-29r7
- https://github.com/thi-ng/umbrella/security/advisories/GHSA-rj44-gpjc-29r7
- https://nvd.nist.gov/vuln/detail/CVE-2021-21412
- https://github.com/thi-ng/umbrella/commit/88f61656e5f5cfba960013b8133186389efaf243
- https://github.com/thi-ng/umbrella/blob/develop/packages/egf/CHANGELOG.md#040-2021-03-27
- https://www.npmjs.com/package/@thi.ng/egf
CVE-2021-21412 · published · modified · JSON