@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) +10 more potentially affected by CVE-2021-32831 via total.js (>=1.2.3 <=3.4.13)

total.js NPM version =1.2.3, =1.1.0, =0.1.5, =0.1.0, =4.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-32831 Source advisory: OSV:GHSA-VWHC-PWW7-72X6...

CVE-2021-32831

CVE-2021-32831 affects the Total.js framework (npm package total.js). The vulnerability lies in the utils.set function when receiving user-controlled values, enabling code injection in versions prior to 3.4.9 and potentially leading to arbitrary code execution. The issue is fixed in version 3.4.9...

@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) +6 more potentially affected by CVE-2021-23389 +1 more via total.js (>=3.2.4 <=3.4.13)

total.js NPM version =3.2.4, =1.1.0, =0.3.0, =4.0.0, =1.0.0, =0.0.1, =0.0.4 Source cves: CVE-2021-23389, CVE-2021-32831 Source advisory: SNYK:JS-TOTALJS-6056532...