What is GHSA-4wv4-mgfq-598v?

GHSA-4wv4-mgfq-598v is a security advisory published by GitHub Security Advisories with Critical severity. Code injection in nobelprizeparser

Why does GHSA-4wv4-mgfq-598v have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-4wv4-mgfq-598v?

GHSA-4wv4-mgfq-598v affects 1 product, including: npm/nobelprizeparser:\u003c 1.0.2.

GHSA-4wv4-mgfq-598vCriticalDisclosed before NVD

Code injection in nobelprizeparser

Vendor

GitHub Security Advisories

Published

March 12, 2021

Last Modified

January 9, 2023

📋 Description

Code injection through use of eval.

🎯 Affected products1

npm/nobelprizeparser:< 1.0.2

🔗 References (4)

https://github.com/AnneTheDev/nobelprize/security/advisories/GHSA-4wv4-mgfq-598v
https://github.com/AnneTheDev/nobelprize/commit/00639d375b0efd097bc1eca18d9dc021691b9286
https://www.npmjs.com/package/nobelprizeparser
https://github.com/advisories/GHSA-4wv4-mgfq-598v