Async Project Async vulnerabilities

1 known vulnerability affecting async_project/async.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-43138HIGHCVSS 7.8fixed in 2.6.4≥ 3.0.0, < 3.2.22022-04-06
CVE-2021-43138 [HIGH] CWE-1321 CVE-2021-43138: In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.
ghsanvdosv