GHSA-hc9w-4p87-j549

Source

https://github.com/advisories/GHSA-hc9w-4p87-j549

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-hc9w-4p87-j549/GHSA-hc9w-4p87-j549.json

Aliases

• CVE-2018-16472

Published

2018-11-07T20:46:25Z

Modified

2023-11-08T03:59:59.886486Z

Details

Version of cached-path-relative before 1.0.2 are vulnerable to prototype pollution.

Recommendation

Update to version 1.0.2 or later.

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-16472
• https://github.com/ashaffer/cached-path-relative/issues/3
• https://hackerone.com/reports/390847
• https://github.com/advisories/GHSA-hc9w-4p87-j549
• https://github.com/nodejs/security-wg/blob/master/vuln/npm/480.json
• https://lists.debian.org/debian-lts-announce/2022/12/msg00006.html
• https://www.npmjs.com/advisories/739