CVE-2021-25946

2021-05-2518:48:25

Mend

www.cve.org

vulnerability

nconf-toml

denial of service

remote code execution

prototype pollution

AI Score

9.8

Confidence

High

EPSS

0.007

Percentile

79.8%

JSON

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

CNA Affected

[
  {
    "product": "nconf-toml",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "0.0.1,0.0.2"
      }
    ]
  }
]