CVE-2023-0163
1 advisory.
npm/convict CVE-2023-0163: high 8.4, EPSS 0.27%
convict vulnerable to Prototype Pollution
Action: Upgrade convict to 6.2.4 or later.
npm i convict@6.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2.4 | - |
Fixed versions
| 6.2.4 |
Sources
- osv: GHSA-4jrm-c32x-w4jf
- https://github.com/mozilla/node-convict/security/advisories/GHSA-4jrm-c32x-w4jf
- https://nvd.nist.gov/vuln/detail/CVE-2023-0163
- https://github.com/mozilla/node-convict/issues/410
- https://github.com/mozilla/node-convict/commit/fb602fbe1e9f14f2e88ecb8179d0f76466d21ecb
- https://github.com/mozilla/node-convict
CVE-2023-0163 · published · modified · JSON