1 matches found
CVE-2021-21412
Potential for arbitrary code execution in npm package @thi.ng/egf gpg-tagged property values only if decrypt: true option is enabled. PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values since GPG only availab...
8.8CVSS6.4AI score0.01339EPSS
SaveExploits0References6Affected Software1
20