PT-2022-9060 · Thenify +3 · Thenify +3

Name of the Vulnerable Software and Affected Versions: thenify versions prior to 3.3.1 Description: The issue arises from the lack of sanitization of the name argument provided to the thenify package, which is then passed to the eval function without any sanitization. This allows untrusted user...