CRITICAL 9.8

GHSA-2c29-wc65-4cx9

linux-cmdline is vulnerable to Prototype Pollution via the constructor

상세

The package linux-cmdline is a parser for Linux kernel command line arguments. Versions before 1.0.1 are vulnerable to Prototype Pollution via the constructor.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

npm / linux-cmdline

최초 영향 버전: 0 수정 버전: 1.0.1

수정 npm install linux-cmdline@1.0.1

참고

https://nvd.nist.gov/vuln/detail/CVE-2020-7704 [ADVISORY]
https://github.com/piranna/linux-cmdline/commit/53c61a88bc47eb25d71832205056beaab95cf677 [WEB]
https://github.com/piranna/linux-cmdline [PACKAGE]
https://snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674 [WEB]