CVE-2024-30564
1 advisory.
npm/@andrei-tatar/nora-firebase-common CVE-2024-30564: critical 9.8, EPSS 1.16%
@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability
Action: Upgrade @andrei-tatar/nora-firebase-common to 1.12.3 or later.
npm i @andrei-tatar/nora-firebase-common@1.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.41 | 1.12.3 | - |
Fixed versions
| 1.12.3 |
Sources
- osv: GHSA-jjff-q3q4-5hh8
- https://nvd.nist.gov/vuln/detail/CVE-2024-30564
- https://github.com/andrei-tatar/nora-firebase-common/issues/9
- https://github.com/andrei-tatar/nora-firebase-common/commit/bf30b75d51be04f6c1f884561a223226c890f01b
- https://gist.github.com/mestrtee/5dc2c948c2057f98d3de0a9790903c6c
- https://github.com/andrei-tatar/nora-firebase-common
CVE-2024-30564 · published · modified · JSON