Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-25946 EUVD-2021-1338GHSA-hx7j-43w2-7rj7

Prototype pollution in nconf-toml

Published May 25, 2021 · Updated Aug 3, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— nconf-toml 0.0.1,0.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm nconf-toml >= 0.0.1, <= 0.0.2 — GHSA-hx7j-43w2-7rj7

References