CVE-2022-25760

The CVE-2022-25760 entry affects the npm package accesslog. The root cause is usage of the Function constructor without input sanitization in the compile path, enabling an attacker-controlled format input to execute arbitrary JavaScript on the host. Affected: all versions of accesslog; impact is ...