npm Update
2566Warning Date
Severity Level
Warning Number
Target Sector
24 June, 2020
● Medium
2020-1392
All
Description:
npm released security update to address a vulnerability in the following product:
- jsrsasign
- prior to 8.0.17
Threats:
An attacker could exploit this vulnerability by triggering memory corruption issues.
Best practice and Recommendations:
The CERT team encourages users to review npm security advisory and apply the necessary updates: