CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

@buckeye/bs-layered-config (>=1.0.0, <=1.2.0), reason-nconf (>=1.2.0, <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (0.0.2)

nconf-toml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: OSV:GHSA-HX7J-43W2-7RJ7...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

CVE-2021-25946 affects the npm package nconf-toml . Vulnerable versions are 0.0.1 through 0.0.2 and the root cause is a prototype pollution flaw in the module, which can allow an attacker to modify object prototypes. The practical impact, as documented, includes a potential denial of service and ...