Lucene search
+L

4 matches found

NVD
NVD
added 2022/08/29 5:15 a.m.40 views

CVE-2022-25921

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

9.8CVSS0.01122EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/29 5:05 a.m.72 views

CVE-2022-25921

CVE-2022-25921 affects the JavaScript package morgan-json . The vulnerability stems from missing sanitization of input passed to the Function constructor, enabling Arbitrary Code Execution . Multiple sources (Snyk, Veracode, GitHub advisories, OSV, CVE list) concur that all versions of morgan-jso...

9.8CVSS9.1AI score0.01122EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/29 5:05 a.m.52 views

CVE-2022-25921 Arbitrary Code Execution

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

8.1CVSS9.9AI score0.01122EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/29 5:00 a.m.4 views

CVE-2022-25921

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

9.8CVSS7.3AI score0.01122EPSS
SaveExploits1References3
Rows per page
Query Builder