6 matches found
@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)
@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: OSV:GHSA-QPFW-4M9X-RXX8...
@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)
@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: GHSA-QPFW-4M9X-RXX8...
CVE-2021-28458
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...
@5252bb/serverless-azure-functions (2.2.1), @adobe/helix-deploy (>=3.0.0, <=3.16.0) +108 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=0.8.4, <=3.0.7)
@azure/ms-rest-nodeauth NPM version =0.8.4, =3.0.0, =2.0.0, =0.0.1, =0.0.1, =0.1.6, =0.0.3, =0.1.33, =0.1.86, =0.1.22, =1.0.0-preview.2, =2.0.0, =2.1.4 and more Source cves: CVE-2021-28458 Source advisory: MEND:CVE-2021-28458...