Code injection

modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions a bug affecting two of the functions in this library: forEachSeries and forEachLimit. They should limit the concurrency of some actions but, in practice, they...

CVE-2021-41167 Unlimited requests in modern-async

modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions a bug affecting two of the functions in this library: forEachSeries and forEachLimit. They should limit the concurrency of some actions but, in practice, they...

PT-2021-23141 · Unknown · Modern-Async

Name of the Vulnerable Software and Affected Versions: modern-async versions prior to 1.0.4 Description: The issue affects two functions in the modern-async library: forEachSeries and forEachLimit. These functions are supposed to limit the concurrency of certain actions, but they do not. As a...