flatten-json Prototype Pollution

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2023-26127: Improper Neutralization of Special Elements used in an OS Command

All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target...

PT-2023-20507 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: n158 versions all Description: The issue arises from improper input sanitization in the module.exports function, leading to Command Injection. To potentially exploit this, an attacker must have the ability to run Node.js code within the targe...

Remote Code Execution

morgan-json is vulnerable to remote code execution. The vulnerability exists due to the missing sanitizations of user input passed to the module.exports function, which allows remote attackers to inject and execute malicious code...