Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary Code Execution
Vulnerability Description
This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Vulnerability Type
N/A
Vulnerability Title
thenify 安全漏洞
Vulnerability Description
thenify是Thenables开源的一个使用 .Promisify 的基于回调的函数。 thenify 3.3.1之前版本存在安全漏洞，该漏洞源于此软件包容易受到任意代码执行的影响，提供给包的name参数可以由用户控制而无任何清理。
CVSS Information
N/A
Vulnerability Type
N/A