silverscreen (>=0.1.0, <=0.1.2) potentially affected by CVE-2021-23419 via open-graph (0.1.7)

open-graph NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on open-graph and may be impacted: - silverscreen =0.1.0, =0.1.2 Source cves: CVE-2021-23419 Source advisory: OSV:GHSA-G452-6RFC-VRVX...

CVE-2021-23419

This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload...

silverscreen (>=0.1.0, <=0.1.2) potentially affected by CVE-2021-23419 via open-graph (0.1.7)

open-graph NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on open-graph and may be impacted: - silverscreen =0.1.0, =0.1.2 Source cves: CVE-2021-23419 Source advisory: SNYK:JS-OPENGRAPH-1536747...