Skip to content
OpenAdvisories

Package · npm

accesslog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2022-25760

    Arbitrary Code Injection

    All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported constructor funct…

    accesslog npm