Skip to content
OpenAdvisories

Package · npm

hull.js

1 known vulnerabilities.

1 result · Feed

  • Critical —

    hull.js Code Injection Vulnerability

    Versions of the library from 0.2.2 to 1.0.9 are vulnerable to the arbitrary code execution due to unsafe usage of `new Function(...)` in the module that handles points format. Applications passing the 3rd parameter to the `hull` function without sanitising ma…