Lucene search

K
osvGoogleOSV:GHSA-JVF4-G24P-2QGW
HistoryMay 10, 2021 - 6:37 p.m.

Arbitrary Code Execution in shiba

2021-05-1018:37:34
Google
osv.dev
6

0.001 Low

EPSS

Percentile

44.6%

All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().

CPENameOperatorVersion
shibale1.2.1

0.001 Low

EPSS

Percentile

44.6%

Related for OSV:GHSA-JVF4-G24P-2QGW