Skip to content
OpenAdvisories

Package · npm

bassmaster

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical —
    CVE-2014-7205 Public exploit EPSS 79%

    Arbitrary JavaScript Execution in bassmaster

    Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.