CVE-2021-23352
1 advisory.
npm/madge CVE-2021-23352: high
Madge vulnerable to command injection
Action: Upgrade madge to 4.0.1 or later.
npm i madge@4.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-753c-phhg-cj29
- https://nvd.nist.gov/vuln/detail/CVE-2021-23352
- https://github.com/pahen/madge/commit/da5cbc9ab30372d687fa7c324b22af7ffa5c6332
- https://github.com/pahen/madge/blob/master/lib/graph.js#L27
- https://snyk.io/vuln/SNYK-JS-MADGE-1082875
CVE-2021-23352 · published · modified · JSON