thenables/thenify

Releases8

Frequency9 months 1 week

Last Release about 6 years ago

Stars109

Promisify a callback-based function

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-7677 ↗	Jul 25, 2022Monday, 25 July 2022, 14:15	8.6 HIGH	—
This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.