CVE-2023-26135
1 advisory.
npm/flatnest CVE-2023-26135: high 7.3, EPSS 0.89%
flatnest Prototype Pollution vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7px2-3c2p-q4v4
- https://nvd.nist.gov/vuln/detail/CVE-2023-26135
- https://github.com/brycebaril/node-flatnest/issues/4
- https://github.com/brycebaril/node-flatnest/commit/27d569baf9d9d25677640edeaf2d13af165868d6
- https://github.com/brycebaril/node-flatnest
- https://github.com/brycebaril/node-flatnest/blob/b7d97ec64a04632378db87fcf3577bd51ac3ee39/nest.js#L43
- https://github.com/brycebaril/node-flatnest/blob/b7d97ec64a04632378db87fcf3577bd51ac3ee39/nest.js%23L43
- https://security.snyk.io/vuln/SNYK-JS-FLATNEST-3185149
CVE-2023-26135 · published · modified · JSON