mithunsatheesh/node-rules

mithunsatheesh/node-rules

GitHubGitHub
GitHubgithub.com
mithunsatheesh.github.iomithunsatheesh.github.io
Releases19
Frequency5 months 3 weeks
Last Release
Stars678
Node-rules is a light weight forward chaining rule engine that can be used in JavaScript and TypeScript based projects.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-7609↗
9.8 CRITICAL7.5 HIGH

node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.