npm Alert
2334Warning Date
Severity Level
Warning Number
Target Sector
3 April, 2022
● High
2022-4597
All
npm has released security updates to address a vulnerability in the following product:
- express-openid-connect
- < 2.7.2
Attacker could exploit this vulnerability by executing arbitrary code
The CERT team encourages users to review npm security advisory and apply the necessary update: