Skip to content
OpenAdvisories

Package · npm

taffy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2019-10790

    TaffyDB can allow access to any data items in the DB

    taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data …

    kubeflow-centraldashboard taffydb taffy Wolfi npm