CVE-2024-21537
1 advisory.
npm/lilconfig CVE-2024-21537: high 8.8, EPSS 1.13%
lilconfig Code Injection vulnerability
Action: Upgrade lilconfig to 3.1.1 or later.
npm i lilconfig@3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 3.1.1 | - |
Fixed versions
| 3.1.1 |
Sources
- osv: GHSA-fq9m-v26v-2m4f
- https://nvd.nist.gov/vuln/detail/CVE-2024-21537
- https://github.com/antonk52/lilconfig/pull/48
- https://github.com/antonk52/lilconfig/commit/2c68a1ab8764fc74acc46771e1ad39ab07a9b0a7
- https://github.com/antonk52/lilconfig
- https://github.com/antonk52/lilconfig/releases/tag/v3.1.1
- https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789
CVE-2024-21537 · published · modified · JSON