HIGH8.8
GHSA-wj36-v8j4-pc7c
Authentication Bypass by Spoofing in express-cart
Quick fix
GHSA-wj36-v8j4-pc7c — express-cart: upgrade to the fixed version with the command below.
npm install express-cart@1.1.6Details
A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
Are you affected?
Enter the version of the package you're using.