88slot-ap (=1.0.0), @_koi/port (>=0.1.7-alpha <=0.1.12-alpha) +1458 more potentially affected by CVE-2021-23395 via nedb (>=0.0.5 <=1.8.0)

nedb NPM version =0.0.5, =0.1.7-alpha, =2.2.0, =0.2.2, =0.2.2, =0.4.9, =0.8.8, =1.1.12, =0.7.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2-alpha.23 and more Source cves: CVE-2021-23395 Source advisory: OSV:GHSA-339J-HQGX-QRRX...

88slot-ap (=1.0.0), @_koi/port (>=0.1.7-alpha <=0.1.12-alpha) +1458 more potentially affected by CVE-2021-23395 via nedb (>=0.0.5 <=1.8.0)

nedb NPM version =0.0.5, =0.1.7-alpha, =2.2.0, =0.2.2, =0.2.2, =0.4.9, =0.8.8, =1.1.12, =0.7.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2-alpha.23 and more Source cves: CVE-2021-23395 Source advisory: SNYK:JS-NEDB-1305279...

PT-2021-15488 · Nedb · Nedb

Name of the Vulnerable Software and Affected Versions: nedb versions all Description: The library could be tricked into adding or modifying properties of Object.prototype using a proto or constructor.prototype payload. This issue affects all versions of the package. Recommendations: For all...