Description
The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | total4 | unspecified – < 0.0.43 | 0.0.43 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | total4 | < 0.0.43 | 0.0.43 | GHSA-g7mq-rfj2-25wq |