Nconf
1 CVEs
product
Monthly
This affects the package nconf before 0.11.4. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Prototype Pollution
Information Disclosure
Nconf
NVD
GitHub
CVSS 3.1
7.5
EPSS
1.8%
CVE-2022-21803
npm
EPSS 2%
CVSS 7.5
HIGH
POC
PATCH
This Week
This affects the package nconf before 0.11.4. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Prototype Pollution
Information Disclosure
Nconf
NVD
GitHub