CVE-2021-23448
1 advisory.
npm/config-handler CVE-2021-23448: critical 9.8, EPSS 1.19%
Prototype Pollution in config-handler
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2w3f-9w3q-qw77
- https://nvd.nist.gov/vuln/detail/CVE-2021-23448
- https://github.com/jarradseers/config-handler/issues/1
- https://github.com/jarradseers/config-handler
- https://snyk.io/vuln/SNYK-JS-CONFIGHANDLER-1564947
CVE-2021-23448 · published · modified · JSON