CVE-2024-38999
1 advisory.
npm/requirejs CVE-2024-38999: critical 10, EPSS 0.84%
jrburke requirejs vulnerable to prototype pollution
Action: Upgrade requirejs to 2.3.7 or later.
npm i requirejs@2.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.7 | - |
Fixed versions
| 2.3.7 |
Sources
- osv: GHSA-x3m3-4wpv-5vgc
- https://nvd.nist.gov/vuln/detail/CVE-2024-38999
- https://github.com/requirejs/r.js/issues/1015
- https://github.com/requirejs/requirejs/issues/1854
- https://github.com/requirejs/requirejs/pull/1856/commits/ebd7a2ff71473542fa132d0d15c10fb4ed1539e1
- https://gist.github.com/mestrtee/9acae342285bd2998fa09ebcb1e6d30a
- https://github.com/requirejs/r.js
- https://security.snyk.io/vuln/SNYK-JS-REQUIREJS-5416713
CVE-2024-38999 · published · modified · JSON