CVE-2021-4264
1 advisory.
npm/dustjs-linkedin CVE-2021-4264: high 8.8
dustjs-linkedin vulnerable to Prototype Pollution
Action: Upgrade dustjs-linkedin to 3.0.0 or later.
npm i dustjs-linkedin@3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-c6rp-wrp9-qr4q
- https://nvd.nist.gov/vuln/detail/CVE-2021-4264
- https://github.com/linkedin/dustjs/issues/804
- https://github.com/linkedin/dustjs/pull/805
- https://github.com/linkedin/dustjs/commit/ddb6523832465d38c9d80189e9de60519ac307c3
- https://github.com/linkedin/dustjs
- https://github.com/linkedin/dustjs/releases/tag/v3.0.0
- https://vuldb.com/?ctiid.216464
- https://vuldb.com/?id.216464
CVE-2021-4264 · published · modified · JSON