Description
All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | morgan-json | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | morgan-json | <= 1.1.0 | — | GHSA-fwv4-6mxc-x5h3 |