4 matches found
CVE-2022-25921
All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...
9.8CVSS0.01122EPSS
SaveExploits1References2
CVE-2022-25921
CVE-2022-25921 affects the JavaScript package morgan-json . The vulnerability stems from missing sanitization of input passed to the Function constructor, enabling Arbitrary Code Execution . Multiple sources (Snyk, Veracode, GitHub advisories, OSV, CVE list) concur that all versions of morgan-jso...
9.8CVSS9.1AI score0.01122EPSS
SaveExploits1References2Affected Software1
20