@thi.Ng/egf Project

@thi.Ng/egf

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-21412

  • EPSS 1.08%
  • Published 30.03.2021 18:15:15
  • Last modified 21.11.2024 05:48:18

Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions d...