npm Alert
2672Warning Date
Severity Level
Warning Number
Target Sector
29 September, 2022
● Critical
2022-5287
All
npm has released security update to address a vulnerability in the following product:
- vm2< 3.9.11
Attacker could exploit this vulnerability by doing the following:
- Bypass of a protection mechanism
The CERT team encourages users to review npm security advisory and apply the necessary updates: