2.0.5
10 years ago
1 years ago
Known vulnerabilities in the json-logic-js package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
json-logic-js is a Build complex rules, serialize them as JSON, and execute them in JavaScript Affected versions of this package are vulnerable to Arbitrary Command Injection due to improper input sanitization, which allows the exploitation of the vulnerability via the How to fix Arbitrary Command Injection? Upgrade | >=2.0.0 <2.0.2 |