Critical · 9.8 CVE-2021-23344 EUVD-2021-0594GHSA-3wj8-vp9h-rm6mSNYK-JS-TOTALJS-1077069

Remote Code Execution (RCE)

Published Mar 4, 2021 · Updated Sep 17, 2024 · Assigned by snyk

Description

The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set.

Vendor	Product	Affected	Fixed
—	total.js	unspecified – < 3.4.8	3.4.8

Ecosystem	Package	Affected	Fixed	Record
npm	total.js	< 3.4.8	3.4.8	GHSA-3wj8-vp9h-rm6m