EUVD-2022-0835

Malicious code in bioql PyPI...

0pflow (>=0.1.0 <=0.1.0-dev.f5622ac), 128981semzub (=1.0.1) +756 more potentially affected by CVE-2022-23631 via superjson (>=0.0.5 <=1.8.0)

superjson NPM version =0.0.5, =0.1.0, =1.0.0, =1.4.40, =4.0.61, =4.0.61, =0.4.0, =0.0.1, =0.0.1, =5.10.2-alpha.1, =5.10.2-alpha.2, =1.0.0, =2.0.0-alpha.7, =2.8.0, =3.0.0-beta.15 and more Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...

CVE-2022-23631

superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitrary code on any server using superjson input without prior authentication or knowledge. The only requirement is that the server implements ...