Skip to content
OpenAdvisories

Package · npm

total.js

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-23389

    Arbitrary Code Execution

    The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

    total.js npm
  • Critical 9.8
    CVE-2021-23344

    Remote Code Execution (RCE)

    The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set.

    total.js npm