Found a Vulnerability In NPM Package(twitter.com)

1 pointsby daudmalik06vor 5 Jahren2 comments

https://twitter.com/DevNackOfficial/status/1481537073068843013

2 comments

heijmansvor 5 Jahren

It was actually reported on (or before) Jan 3rd.

See https://security.snyk.io/vuln/SNYK-JS-EXTEND2-2320315 .

daudmalik06vor 5 Jahren

A high severity vulnerability has been found in a widely used npm package "extend2" with over 46K weekly downloads.