Skip to content
OpenAdvisories
High · 7.5 CVE-2019-5479 EUVD-2019-0680GHSA-xf27-jqwv-gf3r

Unintended Require in larvitbase-api

Published Sep 3, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

Affected products

VendorProductAffectedFixed
— larvitbase-api 0.5.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm larvitbase-api < 0.5.5 0.5.5 GHSA-xf27-jqwv-gf3r

References