CVE-2024-38989
1 advisory.
npm/@bunt/app CVE-2024-38989: critical 9.8
Prototype pollution in izatop bunt
Action: Upgrade @bunt/app to 0.29.26 or later.
npm i @bunt/app@0.29.26Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.29.26 | - |
Fixed versions
| 0.29.26 |
Sources
- osv: GHSA-p734-xg27-8cfq
- https://nvd.nist.gov/vuln/detail/CVE-2024-38989
- https://github.com/izatop/bunt/issues/27
- https://github.com/izatop/bunt/commit/c55201a8cee03e5282f99874dead988c80d31db7
- https://gist.github.com/mestrtee/5e9830fb180a34d65f04fafb52d2b94b
- https://github.com/izatop/bunt
CVE-2024-38989 · published · modified · JSON