This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Authentication Bypass
Memory Corruption
Oracle
Communications Cloud Native Core Policy
Set Value
NVD
GitHub
CVSS 3.1
9.8
EPSS
2.5%