@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: OSV:GHSA-3WJ8-VP9H-RM6M...

CVE-2021-23344 Remote Code Execution (RCE)

The package total.js before 3.4.8 are vulnerable to Remote Code Execution RCE via set...

CVE-2021-23344

Total.js (package total.js) prior to version 3.4.8 is vulnerable to Remote Code Execution via set, as documented in CVE-2021-23344. The vulnerability affects the total.js component (utils/set path) and is confirmed by multiple sources (NVD entry, OpenVAS NASL, and related advisories) indicating a...

CVE-2021-23344

The package total.js before 3.4.8 are vulnerable to Remote Code Execution RCE via set...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: SNYK:JS-TOTALJS-1077069...