Skip to content
OpenAdvisories

Package · npm

json-logic-js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2021-4329

    json-logic-js logic.js command injection

    A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0. Affected by this issue is some unknown functionality of the file logic.js. The manipulation leads to command injection. Upgrading to version 2.0.1 is able to address thi…

    json-logic-js npm
  • High —
    GHSA-m9hw-7xfv-wqg7

    Prototype Pollution in json-logic-js

    Versions of json-logic-js prior to 2.0.0 are vulnerable to Prototype Pollution. The method operation allows a malicious user to modify the prototype of Object through the method property name. This causes modification of any existing property that will exist …

    json-logic-js npm