CVE-2021-4278
1 advisory.
npm/tree-kit CVE-2021-4278: high 7.8
tree-kit vulnerable to Prototype Pollution
Action: Upgrade tree-kit to 0.7.0 or later.
npm i tree-kit@0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-mw4x-g2x8-qcvf
- https://nvd.nist.gov/vuln/detail/CVE-2021-4278
- https://github.com/cronvel/tree-kit/commit/a63f559c50d70e8cb2eaae670dec25d1dbc4afcd
- https://github.com/cronvel/tree-kit
- https://github.com/cronvel/tree-kit/releases/tag/v0.7.0
- https://vuldb.com/?ctiid.216765
- https://vuldb.com/?id.216765
CVE-2021-4278 · published · modified · JSON