Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

convict

npm

Featureful configuration management library for Node.js (nested structure, schema validation, etc.)

View on github.com · View on npmjs.org

Security Advisories for convict in npm

Critical
5 months ago

Convict has Prototype Pollution via startsWith() function GSA_kwCzR0hTQS00NGZjLThmbTUtcTYyaM4ABUVN

npm convict
Critical
5 months ago

Convict has prototype pollution via load(), loadFile(), and schema initialization GSA_kwCzR0hTQS1oZjJyLTlnZjktcndjaM4ABUVM

npm convict
High
over 3 years ago

convict vulnerable to Prototype Pollution GSA_kwCzR0hTQS00anJtLWMzMngtdzRqZs4AAw3Y

npm convict
Critical
over 4 years ago

Prototype Pollution in convict GSA_kwCzR0hTQS1qamY1LXd4M2otM2Z2N84AATH2

npm convict
High
over 4 years ago

Prototype Pollution in convict GSA_kwCzR0hTQS14Mnc1LTcyNWotZ2YyZ809pw

npm convict

Filter by Severity

Critical 3 High 2