npm Update
2990Warning Date
Severity Level
Warning Number
Target Sector
26 August, 2020
● Critical
2020-1682
All
Description:
npm released security update to address a vulnerability in the following product:
- fallguys
- 1.0.0
- 1.0.1
- 1.0.2
- 1.0.3
- 1.0.6
Threats:
An attacker could exploit this vulnerability by exfiltrating sensitive information .
Best practice and Recommendations:
The CERT team encourages users to review npm security advisory and apply the necessary update: