Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary Code Execution
Vulnerability Description
All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
morgan-json 安全漏洞
Vulnerability Description
morgan-json是美国Charlie Robbins个人开发者的一种 morgan.compile 的变体，提供输出 JSON 的格式函数。 morgan-json的所有版本存在安全漏洞，该漏洞源于其缺少对传递给Function构造函数的输入的消毒处理导致攻击者实现任意代码执行。
CVSS Information
N/A
Vulnerability Type
N/A