8 matches found
EUVD-2021-0856
Malware in sbrugna...
CVE-2021-21414
Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...
CVE-2021-21414
Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...
Remote code execution
Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...
CVE-2021-21414
Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the "@prisma/sdk" package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...
CVE-2021-21414: Improper Neutralization of Special Elements used in an OS Command
Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...
OS Command Injection
@prisma/sdk is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary code on the host OS by sending a malicious command via the function getPackedPackage...
PT-2021-14489
Name of the Vulnerable Software and Affected Versions @prisma/sdk versions prior to 2.20.0 @prisma/sdk versions prior to 2.20.0-dev.29 Description This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. It only affects the...