GHSA-6c8f-qphg-qjgpHighCVSS 7.5

Validation Bypass in kind-of

Published
March 31, 2020
Last Modified
November 29, 2023

🔗 CVE IDs covered (1)

CVE-2019-20149 →

📋 Description

Versions of kind-of 6.x prior to 6.0.3 are vulnerable to a Validation Bypass. A maliciously crafted object can alter the result of the type check, allowing attackers to bypass the type checking validation.

Recommendation

Upgrade to versions 6.0.3 or later.

🎯 Affected products1

  • npm/kind-of:>= 6.0.0, < 6.0.3

🔗 References (7)