Skip to content
OpenAdvisories

Package · npm

pouchdb

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Arbitrary Code Injection in pouchdb

    An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The code execution engine for this branch is not properly sandboxed and may be used to run arbitrary Ja…