Lucene search

K

Egf Security Vulnerabilities

cve
cve

CVE-2021-21412

Potential for arbitrary code execution in npm package @thi.ng/egf #gpg-tagged property values (only if decrypt: true option is enabled). PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values (since GPG only...

8.8CVSS

8.9AI Score

0.002EPSS

2021-03-30 06:15 PM
37