jarradseers/config-handler

jarradseers/config-handler

GitHubGitHub
GitHubgithub.com
Releases1
Frequency
Last Release
Stars1
Load configuration, deep merging package, global, environment
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-23448↗
6.5 MEDIUM7.5 HIGH

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.