Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-46942
7.5
HIGHCVSS v3
Published
January 13, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.
GitHub