Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

Description

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a expand-hash

  • 0.1.0, 0.1.1, 0.2.1, 0.2.2, 1.0.0, 1.0.1affected

References