CVE-2021-21414

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...

CVE-2021-21414

The CVE-2021-21414 entry concerns Prisma’s @prisma/sdk, specifically the getPackedPackage function, where untrusted input could lead to OS command injection and remote code execution. The vulnerability was identified across multiple records and is mitigated by patches in @prisma/sdk version 2.20....

@bifot/adapter-knex (12.0.2), @blitzjs/cli (>=0.25.0-canary.2, <=0.45.2) +74 more potentially affected by CVE-2021-21414 via @prisma/sdk (>=2.0.0-alpha.919, <=2.19.0)

@prisma/sdk NPM version =2.0.0-alpha.919, =0.25.0-canary.2, =0.35.0-canary.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =12.0.0, =10.0.0, =1.0.3, =7.3.8, =7.5.2 and more Source cves: CVE-2021-21414 Source advisory: OSV:GHSA-PXCC-HJ8W-FMM7...