Found a Vulnerability In NPM Package(twitter.com)

https://twitter.com/DevNackOfficial/status/1481537073068843013

2 comments

heijmanshá 5 anos

It was actually reported on (or before) Jan 3rd.

See https://security.snyk.io/vuln/SNYK-JS-EXTEND2-2320315 .

A high severity vulnerability has been found in a widely used npm package "extend2" with over 46K weekly downloads.