CVE-2021-23484
1 advisory.
npm/zip-local CVE-2021-23484: critical 9.8, EPSS 2.05%
Exposure of Resource to Wrong Sphere in Zip-Local
Action: Upgrade zip-local to 0.3.5 or later.
npm i zip-local@0.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.5 | - |
Fixed versions
| 0.3.5 |
Sources
- osv: GHSA-wxj7-97fp-j53j
- https://nvd.nist.gov/vuln/detail/CVE-2021-23484
- https://github.com/Mostafa-Samir/zip-local/commit/6bb9b59733df379ac168aa705790bd8339b4bf9b
- https://github.com/Mostafa-Samir/zip-local/commit/949446a95a660c0752b1db0c654f0fd619ae6085
- https://github.com/Mostafa-Samir/zip-local
- https://github.com/Mostafa-Samir/zip-local/blob/master/main.js%23L365
- https://snyk.io/vuln/SNYK-JS-ZIPLOCAL-2327477
CVE-2021-23484 · published · modified · JSON