Skip to content
OpenAdvisories

Package · npm

event-stream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-mh6f-8j2x-4483

    Critical severity vulnerability that affects event-stream and flatmap-stream

    The NPM package `flatmap-stream` is considered malicious. A malicious actor added this package as a dependency to the NPM `event-stream` package in version `3.3.6`. Users of `event-stream` are encouraged to downgrade to the last non-malicious version, `3.3.4`…

    flatmap-stream event-stream npm