@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)

@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: OSV:GHSA-QPFW-4M9X-RXX8...

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...

CVE-2021-28458: Undefined Security Weakness

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...