CVE-2021-21414
1 advisory.
npm/@prisma/sdk CVE-2021-21414: high 7.7, EPSS 2.07%
Command injection vulnerability in @prisma/sdk in getPackedPackage function
Action: Upgrade @prisma/sdk to 2.20.0 or later.
npm i @prisma/sdk@2.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0 | - |
Fixed versions
| 2.20.0 |
Sources
- osv: GHSA-pxcc-hj8w-fmm7
- https://github.com/prisma/prisma/security/advisories/GHSA-pxcc-hj8w-fmm7
- https://nvd.nist.gov/vuln/detail/CVE-2021-21414
- https://github.com/prisma/prisma/pull/6245
- https://security.netapp.com/advisory/ntap-20210618-0003
CVE-2021-21414 · published · modified · JSON