CVE-2021-21414

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...

CVE-2021-21414

The CVE-2021-21414 entry concerns Prisma’s @prisma/sdk, specifically the getPackedPackage function, where untrusted input could lead to OS command injection and remote code execution. The vulnerability was identified across multiple records and is mitigated by patches in @prisma/sdk version 2.20....

@bifot/adapter-knex (=12.0.2), @blitzjs/cli (>=0.25.0 <=0.45.2-danger.c8bb361b5.1) +85 more potentially affected by CVE-2021-21414 via @prisma/sdk (>=0.0.10 <=2.19.0)

@prisma/sdk NPM version =0.0.10, =0.25.0, =0.35.0, =0.0.1, =0.0.1, =0.0.4, =0.0.6, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - @keystonejs-contrib/fields-editorjs =0.1.1 and more Source cves: CVE-2021-21414 Source advisory: OSV:GHSA-PXCC-HJ8W-FMM7...