USN-6016-1 node-thenify vulnerability

It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...

@accordproject/cicero-cli (>=0.2.48 <=0.8.0-20181025052931), @accordproject/cicero-common (>=0.2.50 <=0.3.17-20180604161941) +104 more potentially affected by CVE-2020-7677 via thenify (>=2.0.0 <=3.3.0)

thenify NPM version =2.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: OSV:GHSA-29XR-V42J-R956...

@accordproject/cicero-cli (>=0.2.48 <=0.8.0-20181025052931), @accordproject/cicero-common (>=0.2.50 <=0.3.17-20180604161941) +102 more potentially affected by CVE-2020-7677 via thenify (>=3.0.0 <=3.3.0)

thenify NPM version =3.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: SNYK:JS-THENIFY-571690...