CVE-2021-23448

Published October 11th, 2021

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.

jarradseers/config-handler

Load configuration, deep merging package, global, environment

GitHub

1