CVE-2022-25760

creationtimestamp| type| source ---|---|--- 2022-03-17 15:21:38+00:00| seen| https://t.me/cibsecurity/39137...

CVE-2022-25760

The CVE-2022-25760 entry affects the npm package accesslog. The root cause is usage of the Function constructor without input sanitization in the compile path, enabling an attacker-controlled format input to execute arbitrary JavaScript on the host. Affected: all versions of accesslog; impact is ...