Skip to content
OpenAdvisories

Package · npm

@sap-cloud-sdk/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2021-41251

    Possibility to elevate privileges or get unauthorized access to data

    @sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform abstractions. This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations…

    SAP cloud-sdk-js @sap-cloud-sdk/core npm
  • High —
    GHSA-r2vw-jgq9-jqx2

    Improper Authorization in @sap-cloud-sdk/core

    Affected versions of `@sap-cloud-sdk/core` do not properly validate JWTs. The `verifyJwt()` function does not properly validate the URL from where the public verification key for the JWT can be downloaded. Any URL was trusted which makes it possible to provid…

    @sap-cloud-sdk/core npm