Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/03/30 5:40 p.m.32 views

CVE-2021-21412 [thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values

Potential for arbitrary code execution in npm package @thi.ng/egf gpg-tagged property values only if decrypt: true option is enabled. PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values since GPG only availab...

6.4CVSS9.2AI score0.01339EPSS
SaveExploits0References4
Rows per page
Query Builder