Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-43138

async: Prototype Pollution in async

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

CVSS 3.1 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Async Project Fedoraproject Redhat
Products
Async Fedora Rhmt and 1 more