@amirmarmul/waba-common (>=2.2.51 <=2.9.8), @aptana/multichannel-common (>=2.9.12 <=2.10.2) +14 more potentially affected by CVE-2022-25921 via morgan-json (=1.1.0)

morgan-json NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on morgan-json and may be impacted: - @amirmarmul/waba-common =2.2.51, =2.9.12, =1.0.0, =1.1.3, =1.0.0, =1.0.3, =0.11.0, =2.0.0, =0.0.5, =1.0.0, =0.1.0, =1.1.0, =0.0.1, =2.1.5...

CVE-2022-25921

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

CVE-2022-25921

CVE-2022-25921 affects the JavaScript package morgan-json . The vulnerability stems from missing sanitization of input passed to the Function constructor, enabling Arbitrary Code Execution . Multiple sources (Snyk, Veracode, GitHub advisories, OSV, CVE list) concur that all versions of morgan-jso...

CVE-2022-25921 Arbitrary Code Execution

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

CVE-2022-25921

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor...

@amirmarmul/waba-common (>=2.2.51 <=2.9.8), @aptana/multichannel-common (>=2.9.12 <=2.10.2) +14 more potentially affected by CVE-2022-25921 via morgan-json (=1.1.0)

morgan-json NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on morgan-json and may be impacted: - @amirmarmul/waba-common =2.2.51, =2.9.12, =1.0.0, =1.1.3, =1.0.0, =1.0.3, =0.11.0, =2.0.0, =0.0.5, =1.0.0, =0.1.0, =1.1.0, =0.0.1, =2.1.5...