Versions of the package bun before 1.1.30 are vulnerable... · CVE-2024-21548 · GitHub Advisory Database · GitHub

Versions of the package bun before 1.1.30 are vulnerable...

High severity Unreviewed Published Dec 18, 2024 to the GitHub Advisory Database • Updated Dec 18, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects.

References

Published by the National Vulnerability Database

Dec 18, 2024

Published to the GitHub Advisory Database Dec 18, 2024

Last updated Dec 18, 2024