Async 安全漏洞

🗓️ 06 Apr 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

A security vulnerability in Async 3.2.1 and earlier allows privilege gain via mapValues() method.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-43138	27 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	26 Mar 202504:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2022-34339, CVE-2021-3712, CVE-2021-3711, CVE-2021-4160, CVE-2021-29425, CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-43138, CVE-2022-24758)	26 Mar 202502:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation is vulnerable to arbitrary code execution due to async (CVE-2021-43138)	25 Jul 202219:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022	20 Jun 202213:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands that run Designer flows may be vulnerable to arbitrary code execution due to [CVE-2021-43138]	28 Apr 202311:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/
github	www.github.com/caolan/async/blob/v2.6.4/CHANGELOG.md
github	www.github.com/caolan/async/compare/v2.6.3...v2.6.4
github	www.github.com/caolan/async/pull/1828
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/
jsfiddle	www.jsfiddle.net/oz5twjd9/
github	www.github.com/caolan/async/blob/master/lib/mapValuesLimit.js
github	www.github.com/caolan/async/blob/master/lib/internal/iterator.js
github	www.github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d
auscert	www.auscert.org.au/bulletins/ESB-2023.3839

23 May 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 3.17.8

EPSS0.03372

Async module security vulnerability privilege escalation map values method caolan mcmahon