8.1 High

CVE-2022-25921 All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input…

Description

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.

Affected products and versions

Product	Affected versions	Fixed in
morgan-json	Versions not published

Do you use morgan-json?

Track this CVE Watch morgan-json Check my SBOMs

www.cveye.io/en/cve/CVE-2022-25921

Timeline

Published August 29, 2022
Last modified September 17, 2024

References

security.snyk.io security.snyk.io
github.com github.com

Track this CVE