louischatriot/nedb

Releases2

Frequency1 month 3 weeks

Last Releaseover 10 years ago

Stars13.5K

The JavaScript Database, for Node.js, nw.js, electron and the browser

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-23395NVD↗	all versions, <= 1.8.0	Jun 15, 2021Tuesday, 15 June 2021, 20:15	7.3 HIGH	5 MEDIUM
This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.