CVE-2021-25948
1 advisory.
npm/expand-hash CVE-2021-25948: critical 9.8
Prototype Pollution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x3wr-v4wx-5qpc
- https://nvd.nist.gov/vuln/detail/CVE-2021-25948
- https://github.com/doowb/expand-hash
- https://github.com/doowb/expand-hash/blob/556913f6c2f05848110b5b8261cfc78e5ce3dc77/index.js#L19
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25948
CVE-2021-25948 · published · modified · JSON