@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)

@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: OSV:GHSA-QPFW-4M9X-RXX8...

CVE-2021-28458

creationtimestamp| type| source ---|---|--- 2021-04-15 06:06:29+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus11/21...

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...

CVE-2021-28458 Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

...

Patch Tuesday - April 2021

Patch Tuesday is here again and there are more Exchange updates to apply! A total of 114 vulnerabilities were fixed this month with more than half of them affecting all versions of Windows, with about half of them being remote code execution bugs, and about a fifth of them being rated as critical...