sailshq/nedb

Releases5

Frequency2 years 7 months

Last Release4 months ago

Stars1

The JavaScript Database, for Node.js, nw.js, electron and the browser

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-23395NVD↗	all versions, <= 1.8.0	Jun 15, 2021Tuesday, 15 June 2021, 20:15	7.3 HIGH	5 MEDIUM
This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.