Description

This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).

Remediation

References

https://snyk.io/vuln/SNYK-JS-BUNS-1050389

Related Vulnerabilities

CVE-2023-45135 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-skin-resources

CVE-2021-21693 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2012-0394 Vulnerability in maven package org.apache.struts:struts2-core

CVE-2023-28670 Vulnerability in maven package com.paul8620.jenkins.plugins:pipeline-aggregator-view

CVE-2016-10365 Vulnerability in npm package kibana

Severity

Critical

Classification

CWE-78

Tags

Vendor Advisory