Description
This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).
Remediation
References
https://snyk.io/vuln/SNYK-JS-BUNS-1050389
Related Vulnerabilities
CVE-2022-33980 Vulnerability in maven package org.apache.commons:commons-configuration2
CVE-2023-24445 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2013-4517 Vulnerability in maven package xml-security:xmlsec
CVE-2020-25803 Vulnerability in maven package org.craftercms:crafter-studio