Description

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:

Remediation

References

https://snyk.io/vuln/SNYK-JS-TSPROCESSPROMISES-1048334

Related Vulnerabilities

CVE-2021-21307 Vulnerability in maven package org.lucee:lucee

CVE-2019-5479 Vulnerability in npm package larvitbase-api

CVE-2017-11554 Vulnerability in npm package node-sass

CVE-2022-36067 Vulnerability in npm package vm2

CVE-2022-39243 Vulnerability in maven package com.zaxxer:nuprocess

Severity

Critical

Classification

CWE-78

Tags

Exploit Third Party Advisory