CVE-2021-43138

7.8

HIGHCVSS v3

Published

April 6, 2022

CVSS v2

6.8 MEDIUM

Affected

12 projects

Assigned by

MITRE

Severity scale

010

Description

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

async

NPMHigher-order functions and common patterns for asynchronous code

< 2.6.4, >= 3.0.0, < 3.2.2NVD

@types/async

NPMTypeScript definitions for async

< 2.6.4, >= 3.0.0, < 3.2.2NVD

marcoscaceres/async

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Light-weight approximate implementation of ES7's async-await.

< 2.6.4, >= 3.0.0, < 3.2.2NVD

caolan/async

GitHubAsync utilities for node and the browser

< 2.6.4, >= 3.0.0, < 3.2.2NVD

@kristoferbaxter/async

NPMAsync Utilities for Module Node Development.

< 2.6.4, >= 3.0.0, < 3.2.2NVD

@calebboyd/async

NPMAsync tools

< 2.6.4, >= 3.0.0, < 3.2.2NVD

@shopify/async

NPMPrimitives for loading parts of an application asynchronously

< 2.6.4, >= 3.0.0, < 3.2.2NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 36, = 37NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 36, = 37NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 36, = 37NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 36, = 37NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 36, = 37NVD

Security Advisories

CVE-2021-43138

Description

More on this CVE