CVE-2021-23390
Code Injection in total4
Summary
Code Injection in total4
Original description
The description as published by the source.
The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
total4
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.43"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web github.com
- web snyk.io