CVE-2022-25760
1 advisory.
npm/accesslog CVE-2022-25760: high 7.1
Code injection in accesslog
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8m2f-74r2-x3f2
- https://nvd.nist.gov/vuln/detail/CVE-2022-25760
- https://github.com/carlos8f/node-accesslog
- https://github.com/carlos8f/node-accesslog/blob/master/lib/compile.js%23L6
- https://snyk.io/vuln/SNYK-JS-ACCESSLOG-2312099
CVE-2022-25760 · published · modified · JSON