This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Memory Corruption
Authentication Bypass
Set Value
Communications Cloud Native Core Policy
NVD
GitHub
CVSS 3.1
9.8
EPSS
2.5%