Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3djQtbWdmcS01OTh2
Code injection in nobelprizeparser
Code injection through use of eval.
Permalink: https://github.com/advisories/GHSA-4wv4-mgfq-598vJSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3djQtbWdmcS01OTh2
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: about 3 years ago
Updated: over 1 year ago
Identifiers: GHSA-4wv4-mgfq-598v
References:
- https://github.com/AnneTheDev/nobelprize/security/advisories/GHSA-4wv4-mgfq-598v
- https://github.com/AnneTheDev/nobelprize/commit/00639d375b0efd097bc1eca18d9dc021691b9286
- https://www.npmjs.com/package/nobelprizeparser
- https://github.com/advisories/GHSA-4wv4-mgfq-598v
Blast Radius: 1.0
Affected Packages
npm:nobelprizeparser
Dependent packages: 1Dependent repositories: 0
Downloads: 3 last month
Affected Version Ranges: < 1.0.2
Fixed in: 1.0.2
All affected versions: 1.0.0, 1.0.1
All unaffected versions: