GHSA-4vmm-mhcq-4x9j

Опубликовано: 14 июн. 2019

Источник: github

Github: Прошло ревью

CVSS3: 10

Описание

Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution.

Update to version 3.1.1 or later.

Наименование

constantinople

npm

Затронутые версииВерсия исправления

< 3.1.1

3.1.1

10 Critical

CVSS3

10 Critical

CVSS3