VYPR

egf

by thi.ng

CVEs (1)

  • CVE-2021-21412Mar 30, 2021
    risk 0.00cvss epss 0.01

    Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt…