CVE-2021-25915
1 advisory.
npm/changeset CVE-2021-25915: critical 9.8
Changeset vulnerable to prototype pollution
Action: Upgrade changeset to 0.2.5 or later.
npm i changeset@0.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 0.2.5 | - |
Fixed versions
| 0.2.5 |
Sources
- osv: GHSA-2gqw-q9r9-7f79
- https://nvd.nist.gov/vuln/detail/CVE-2021-25915
- https://github.com/eugeneware/changeset/commit/9e588844edbb9993b32e7366cc799262b4447f99
- https://github.com/eugeneware/changeset
- https://web.archive.org/web/20210323102946/https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25915
CVE-2021-25915 · published · modified · JSON