12 matches found
CLSA-2026-1773101703 TuxCare security update for async (1 CVE)
TuxCare rebuilt async to address 1 CVE. Fixed in 2.6.1-tuxcare.1...
EUVD-2025-111899
Malicious code in kronos-async-library-io npm...
MAL-2025-144214 Malicious code in kronos-async-library-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6bee7aa7b2d9c88f44508041512b5125621a3086325c536cd05f9df907abd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Async Security Vulnerabilities
Async is a utility module by the individual developer Caolan McMahon in the UK. It is used for working with asynchronous JavaScript. A security vulnerability exists in Async versions 2.6.4 and earlier and 3.2.5 and earlier, which stems from vulnerability to a Regular Expression Denial of Service...
CVE-2024-39249
Async = 2.6.4 and = 3.2.5 are vulnerable to ReDoS Regular Expression Denial of Service while parsing function in autoinject function. NOTE: this is disputed by the supplier because there is no realistic threat model: regular expressions are not used with untrusted input...
SUSE CVE-2021-43138
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...
GHSA-FWR7-V2MV-HH25 Prototype Pollution in async
A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x fixed in 3.2.2 and 2.6.4, which could let a malicious user obtain privileges via the mapValues method...
CVE-2021-43138
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...
CVE-2021-43138
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...
CVE-2021-43138
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...
PT-2022-7301
Name of the Vulnerable Software and Affected Versions Async versions 2.x through 2.6.3 Async versions 3.x through 3.2.1 Description The issue is related to the mapValues function in the Async library, which is used for working with asynchronous JavaScript. It involves the incorrect control of...
