CVE-2021-23392
1 advisory.
npm/locutus CVE-2021-23392: high 7.5, EPSS 1.94%
Uncontrolled Resource Consumption in locutus
Action: Upgrade locutus to 2.0.15 or later.
npm i locutus@2.0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.15 | - |
Fixed versions
| 2.0.15 |
Sources
- osv: GHSA-39q4-p535-c852
- https://nvd.nist.gov/vuln/detail/CVE-2021-23392
- https://github.com/locutusjs/locutus/pull/446
- https://github.com/locutusjs/locutus/commit/eb863321990e7e5514aa14f68b8d9978ece9e65e
- https://snyk.io/vuln/SNYK-JS-LOCUTUS-1090597
CVE-2021-23392 · published · modified · JSON