CVE-2022-25921

Publication date

2022-08-29 05:05:15

Family

snyk

State

PUBLISHED

Description

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.